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FEDERAL BUREAU OF INVESTIGATION 


Dale i>f ;;as>sc;ipia«i _ 


iU/ /ri)n)i On February 2o. 201fj.|_ [ >OBl _ 

intervie wed hy federal Bureau of Investigation (i-Bi) Special Agents_ 

a; ihe PBi Washin gton Reid Office. 601 -U Sired NW. Washin gton DC. Presen 

wasl I co unsci. 1 Attorn ey at Law, at_ 

_„ as well as 1 and | [ from the D epartmen t of Juslii 

Counterintelligence and Export Control Section. Prior to the interview]_[agreed to 

disclosure agreement in anticipation of viewing classified documents during the interns: 

advised of the identities of the interviewing agents, and the purpose of the it Her view]_ 

provided the following information: 


r-1 

and[_| 


t of Justice (DOT) 
agreed to sign a non- 


_ {iMf¥MMrb 1 I became the U.S. Depar tment of State (DoS)l _|_ 

. . lunderl IH 

cuii i m t icd L o . serve as the l I under I I T 

- -1 became the I lunderl_| before being named the J_ 

I | . As the [ oilke was located in Washington DC but he traveled frequently and 

took trips to Afghanistan and Pakistan every four to six weeks. 

tU/ /K)Ut -ttl ~ did not have iivu ucnt contact with the Secretary of Stale when 

I [ This was because | . lit am j led all of the direct 

communications with the Secretary and her team himself ] | described his rule under 

_as being external facing, i Ic further explained that he was responsible, iuv coordinating 

with Congress and facilitating other international and economic engagements. I _untune more 

focused on Afghanistan matters when_Jbeeame the [ I because ] _| wattled in 

focus mainly on Pakistan. In this role]_[had more tegular contact with the Secretary find her 

team, which included traveling to the region with them. 


tU/ /LOUU )|_Jprovided that he primarily interacted with the following individuals on 

the Secretary's team: CHERYL MILLS for USAID and communications matters; JAK.L SULLIVAN for 
polity matters an d to nrcnarc fur Dcnu tv Committee or Principal C ommittee me etings: HUM A A BE DIN 
fur iunisiies: ami I for communications matters.[ noted that he has 
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tU//K)U*H_|communicated directly with SULLIVAN and MILLS tor anything that 

needed (he Secretary’s attention, {-samples include topics that involved international matters, topics that 
could potentially impact DoS equities, and topics involving private sector engagements. These exchanges 
could he either classified or unclassified depending on the specific content and were done via the 
appropriate telephone or email system. 


{U'VT'OUO) While at DoS, I_I had an OpenN'et and ClassNet account but he did not have 

a j WK S account. DoS also issued ! la Bla ckberry, which was linked to his unclassified DoS 

email account, and a STL for his home._used his Blackberry email extensively when he was 

overseas because other communication channels were often not available. 


a j WiCS account. DoS also issued 


(U/d 'O! JO > |_j could only recall one instance following the birth of his son when he 

received an email directly from the Secretary. He remembered that the email came from a non-DoS email 

account but he didn't think much of it at the time._was n ot aware that the Secretary was using 

a private email account and server to conduct DoS business, n or was! aware of any other DoS 

employees using personal email accounts for official business. ! - [ provided that he had the 

personal email addresses of both SULLIVAN and MILLS but he did not recall ever using those accounts 
lot official business. 


|__ Icon firmed that he was r ead into a Special 

Access Program ! | understood the 

sensitivities surrounding the program unci the need to appropriately safeguard related information. As 
such, tire DoS stance was not to publicly comment on the program. 



|_| was shown a copy of an em ail chain f rom 

December of 2011 with the subject "(SBU).” After reviewing the email ! stated that he did not 

reme mber the circu mstances in which the email was originally sent. However, based on the email time 

stamp _believed he was in California when he received the ema il and that lie would not have 

had am other means of forwarding the information to those who needed it. stated that 
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sodding information on the unclassified system was not idea! Ins! -hat he often 


did not have a choice when it came to time sensitive information._did not recall receiving any 

specific miming or guidance on how time sensitive information should be transmitted. 


February of 3012 with the subject '‘Alert-' 


y was shown a copy of an email chain from 
i not remember the email chain. However, utter 


a-v-ewmy the ema. 


_Himethdessj_|did not have concerns sending this type of information on an 

unclassified system because the story was about to break in the news and it was important that they got 
the information to the .‘sooii'iitro htnhro ih:it iwnmvf 


-1-- -I was shewn ;i k’onv ni.an email chain from 

__Jwith the subject_. ■_1 stated if was sent prior to 

the referenced article being released in the press.|_| could not recall any further details about the 

information provided itl the email. He noted that a number of similar stories were being released by the 

press at that time.)_ J believed that the information in the email could he treated as unclassified 

because the article was about to be released and it was critical that he notify the appropriate people within 
DoS. 


with the subject | _ I 

provided that the email was forwarding a news article of interest to individuals within DoS | 

.stated that the comments he included when he forwarded the email we re not meant to confirm the veracity 
os the news article but rather to express his frustration with the article. I I further explained that 

-011 was a particularly difficult period for bilateral relationships in the region and that DoS efforts were 
often complicated hv such articles. 

___was shown a copy of an email chain from May 

o! 201 with the subject “Update-" ! I did not r ecall the exact circumstances of the email but 

noted that it was unusual for him to interact directly with_provided that he 

forwarded the email because it was a matter that required the immediate attention of DoS to preserve its 
equities. 

At the conclusion of the interview ] noted that none of the emails that he 

was shown were originated by him. The emails cither involved information that was about to be released 
publicly or were authored by another individual. 
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ALL FBI IMFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

CATE 0S-13-201S BY l 37985T94 MSIt 


FEDERAL BUREAU OF INVESTIGATION 


Dale of transcription 2/4/2016 


(U/ / F OU 6) On February 3, 2016 .1 I telep hone number _ 

was inte rviewed by Fed eral Bureau of Investigation (FBI1 Special Agents! land ! 

l at the offices of|_____ [Washington 

DC. Also present for the interview was ] 1 an I I Principal, whom I 

asked to sit in on the inte rview. After b eing advised of the identities of the interviewing agents, and the 
purpose of the interview, provided the following information: 



(U/ /FOUO) |_pffice at DoS was located on “Maho gany Row,” a term given to the 

Executive hallway where the Secretary of State's office is also located ! [ held a Top Secret 

(TS), Sensitive Compartme nted Information (SCI) clearance while at DoS, and handled classified 

information on a daily basis ! I _received copies of 

the Presidential Daily Brief (PDB), the dissemination of which was restricted to only the highest positions 
in the United States Government. 


(U// FQU O ) When|_peeded to communicate something classified to CLINTON, 

would walk down “Ma hogany Row” and talk to CLINTON face-to-face. If C LINTON was not in the 
office, or on travel, and ! I needed to discuss classified information, would contact 

CLINTON via a secure phone or send her a secure memo. 


(U/ /FOUO )_w as no t aware that CLIN TON was using a personal ema 1 account while 

she was Secretary of State, nor did [recall w hat address [ yped in or saw when ;ent emails to or 
received emails from CLINTON | [ assumed whatever devices CLINTON used to conduct 

business while she was Secretary of State were approved, because nobody at DoS used devices without 

approval. _was not aware of any DoS policy against using personal or private email accounts 

to conduct unclassified DoS business. 


Investigation on 2/3/2016 ni. 


Washington. D C 


Dale dictated N/A 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned lo your agency: it 
and its contents arc not to be distributed outside your agency. 
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(U/ / F 0 UO) On a f ew oc casions, 
travel while ] ] was | 


_[traveled with CLIN TON. However, the majority of 

Jwas done so or ] \ >\ 


)wn. 


(U// FOUO) Agents asked 


American Foreign Service Association, 


a 2013 speech to the 
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]explained the quote was in re sponse to a question 


_in regards 

to how busin ess had changed at DoS since l I PRESIDEN T CLINTON's administration. 

I further explained that durind [previous assignment to DoS | nobody at DoS 

had access to unclassified systems of an yTUn. Blackberries didn't exist, and unclassified computer 
systems were not yet installed at DoS. The on ly wav to com municate during t hat time per iod was via 
cables and on the telephone. In contrast, when ! I returned to DoS in | h ad access to 

SIPRNet, JWICS, and Un classified computer s as w ell as unclassified Blackberries, and secure iPads. 

^the above statement, ! [ was trying to explain how technology has allowed for a 


different form of information flow, and ultimately sped up the way in which DoS does business. 


(u//Feye 


further clarified 


speech, was unclassified, ! k as not implying that information CL1 


eferenced above in | [ 2013 
NTON may have been 


communicating classified material on her Blackberry concerning the unclassified matter. 
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(U/ / F OUO ) It was | l opinion that 

understands the importance of protecting sources and 
misconception about how DoS classifies documents, 
discuss topics with Foreign Partners is via unclassified channels, or in very sensitive cases, by making 
arrangements to meet in person at Embassies or at DoS. Since there isn't a classified system that allows 
DoS to communicate with its foreign counterparts, conversations that are held with foreign partners in 
unclassified channels are later “up-classified” to Secret to protect the information. 


everybody at DoS takes security very seriously and 


methods 


hinks there is a 


and further explained that generally the only way to 
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(U/ /FOUO ) In defense of DoS practices^ 


jshar ed a story c oncernin g h teraction 
with then FBI Deputy Director MAR K GI ULIA NQ, wherein! I state d I nteracted frequently with 
GIULIANO via email. I ^stated! thad the upmost le lpect for GIULIANO, but believed i| 

*T - I ._J *. *1. ' TT IT T A XTA I L . 1 .1 f._ I __*. 1 1_ _ 


was to revie\\j [inclassified email exchanges with GIULIANO] f^vould find emails that some would 

consider sensitive 
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(U//F0W6) When 


of Informati on A ct (FOIA) inquires, 

account that fietermined were “e ven re motely related to work, 
emails to 


family via G mail while 
anything con cerning pole at DoS, 
ler expfai 


] rec eived a request to produce documents in re sponse to Freedom 
p i so queried and produced emails from I b ersonal Gmail 

| sometimes sent short 

r eferenced negotiations or 


was on travel and felt that if 
should produce th e docu ments in an abun dance of caution. 


further explained that it WTnot uncommon fori 


:o have 

account to communicate while on travel, because there were often times] 
unclassified account, 
communication^ 



e j p ersonal Gmail 
ould not access her DoS 


Jwould try to copy her DoS email account on any DoS related 


[may have sent from her Gmail account. 


(U/ / F QUO )[ 


was not a ware of any specific instances where 


_received notification 

concerning a potential hac k of any oil bmail ac count s (DoS or personal) or the email accounts of other 


DoS employees. However, 
email account and the accounts ofl 
Iran negotiations. Specifically,! 


Texplained j [ was sure people tried to hack into 
Ream approximately two years ago during I 


[pers onal 
I in the 
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received a similar email. 
traced the emails back to a[ 


Ireporte d the incident to DoS Diplomatic Security who reportedly 

| bl per DOS 


(U//F 0UO ) A copy of the original interview notes are attached in a 1A envelope. 
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ALL FBI IWFORilATIGtJ CONTAINED 

HEREIM IS UNCLASSIFIED 

CATE 08-13-2016 BY C28W34B64 NS ICG 


FEDERAL BUREAU OF INVESTIGATION 


Dale of iranscriplion 09/17/2015 


(U/ /FOU O-) 


date of birth! 


was interviewed at the 


offices of PLATTE RIVER NETWORKS (PRN), 5700 W ashington Street, De nve r. Colorado 8 0216, by 
Federal Bur eau of Investigation (FBI) Special Age nts (SA)| land 

Also present duri ng the inte rview werel 


Justice and[ 


attorney at£ 


interviewing agents, and the nature of the interviewj 


J attorney, U.S. Department of 
After being advised of the identity of the 
provided the following information: 


(U/ /rOU O) In mid-2013,[ 


]was selected to provide technical support on a contract 


PRN had acquired for the management of a new server used solely for email exchange for domains and 
accounts associated with BI LL CLINTON , HILLARY CLINTON and their aides under the PRN account 
name CESC (CESC client). ! lknewthe company InfoGrate to be the contact who initiated the 

PRN contract with the CESC client |_(understood the CESC client was already using email 

transition to the PRN managed new server,|_Jn eeded to under stand the needs of the client and 


domains hosted on a server out of their resi dence in Chapp aqua, New York, and in order to effect the 
transition to the PRN managed new server, ! | ne 

the configuration of the ser ver being house d in Chappaqua [ 


PAGLIANO granted! In 

'mote adminis 

name 


and in mid-2013, 



was put in contact with 


rator access to the server under the administrator user 
logged in to the server at Chappaqua. 


(U//FeyO)[ 


described the physical equipment comprising the email server at the 


Chappaqua residence as a Dell PowerEdge 2900 (PowerEdge 2900) running Microsoft Exchange 2007, a 
Dell PowerEdge 1950 (PowerEdge 1950) being solely used as a BlackBerry Enterprise Server (BES), a 
Cisco NSS 324 for Network Attached Storage (NAS), a switch, a firewall and a Uninterruptible Power 
Supply (UPS). The PowerEdge 2900 server hosted the email domain presidentclinton.com, wjcoffice.com 
and clintonemail.com, and had 20 to 30 email accounts associated. The PowerEdge 2900 was used 
exclusively for email, with no file or print options. The PowerEdge 2900 had Microsoft Forefront 
security and Norton Symantec anti-virus software installed on it. No one but PAGLIANO had 
administrator rights to the PowerEdge 2900 server] 


believed the Chappaqua residence had 


Comcast as an Internet Service Provider (ISP). 
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(U//FOUO) In order to effect the transition from the foregoing server equipment in the 
CLINTON'S residence in Chappaqua to the new PRN server infrastructure and service, CESC and PRN 


Invcsligalion on 09/15/2015 
File # I hi 12 


at 


Denver. Colorado 


Date dictated N/A 
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arranged a time to power down the equipment in Chappaqua, transport it to a data center and migrate the 
existing email accounts and domains to the new server infrastructure being provided by PRN. 

(U/ /FOUO ) On or around 06/22/2013, and based on an infrastru cture plan as part of a Service 

Level Agreement (SLA) to provide the CLINTONS with new hardware,_ a PRN 

employee, setup a Dell PowerEdge 620 (PowerEdge 620), two PowerConnect 2824 switches, two Fortinet 
firewalls and a Datto SIRIS 2000 (DATTO), and hooked them up in a rented space at Equinix, a data 
center located in Secaucus, New Jersey. 

(U/ /FOUO ) On 06/23/2013, r f t raveled to the CLINTON residence in Chappaqua and 

picked up the Power Edge 2900, the PowerEdge 1950, and the NAS, while leaving the switch, firewall and 
UPS at the residence ] I tr ansported the equipment to the same rented space at Equinix as the 

PowerEdge 620, where]_Iplugged in and networked all the equipment to get it back online in 

order to provid e CESC with continued email access I plugged in the NAS, but according to 

I I no email archiving or b ack-up was on i t and it appeared to only have insta ll files. The NAS 

was not configured to archive email bv l l or PRN at any time. l I changed the mail 

exchanger (MX) record to specify the transition to the new IP address and configuration at Equinix. 

(U//E OU O) On or around 06/30/2013. 1 Ibegan the em ail migration for all CESC 

accounts from the PowerEdge 2900 to the PowerEdge 620 | Iperf ormed this by right-clicking 

on individual mailboxes and migrating them over one at a time. I I stated he brought over the 

entire content of all the mailboxe s from the Pow erEdge 2900 to the PowerEdge 620 as there was no way 

to do it “piece meal” or partially._described the migration process as more of a “sync” and 

once the servers “agree” that the mailbox is moved, the mailbox is removed from the old server. As a 
result of the migration, no email content existed on the PowerEdge 2900 During the migration, the 
PowerEdge 2900 and 620 worked together in the same exchange where the servers agree that each email 
sent or received is an identical copy. Additionally, ! [ configured the P owerEdge 620 to host a 

Blackberry Enterprise Server (BES) and a Domain Controller as virtual machines ] 
explained the Domain Controller as being used for password and authentication requests. The PowerEdge 
620 was also running Microsoft Exchange 2010 software, which was an upgrade from th e software on the 

PowerEdge 2900. Additionally, as part of the new server infrastructure provided by PRN,|_ 

configured th e DATTO back -up device to take multiple snapshots of the server a day that purged at 60 
day intervals ] I also configured both sets of firewalls and switches for redundancy in case one 

went down. After several days of migration, the PowerEdge 620 had all email mailboxes migrated to it 
and was processing email on Micros oft Exchange 20 10 for the email domains presidentclinton.com, 
wjcoffice.com and clintonemail.com. f | was “very c onfident” that a ll email had migrated from 

the Po werEdge 2900 to the PowerEdge 620. At some point later._remembers adding the 

domain l~ I to the PowerEdge 620. After total migration, PRN decided to keep the 

PowerEdge 2900, 1950 and NAS running, even though it was no 
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longer processing email, in order to ensure email was being delivered without failure through the 
PowerEdge 62 0. There was no official user security policy to have an account on the PowerEdge 620. 

I registered the Secure Sockets Lay er (SSL) certific ate for the domains hosted on the 
PowerEdge 620. Additionally, PAGLIANO gave | the credentials for the clintonemail.com 

domain, registered at Network Solutions. 
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(U//FOUO) On or around 12/2013, PRN made the decision that email delivery was working well 
after the migration from th e PowerEdge 29 00 to the PRN managed PowerEdge 620. In order to power 
down the PowerEdge 2900, | [ stated Microsoft Exchange 2007 would need to be unin stalled 

from the PowerEdge 2900, or the PowerEdge 620 would generate error messages. 1 I 

uninstalled Microsoft Exchange 2007 from the PowerEdge 2900 by clicking on uninstall and following 
the system prompted checks to ensure there were no ties between the PowerEdge 2900 and the 
PowerEdge 620 and no active mailboxes were on the PowerEdge 2900. From that point on, the 
PowerEdge 2900, 1950 and NAS sat disconnected in the cage at Equinix until the FBI picked up the 
PowerEdge 2900 on 08/12/2015. The uninstallation of Microsoft Exchange and powering down of the 
PowerEdge 2900 was an action taken by PRN as standard protocol without order or direction from the 
CESC client. 


Idescribed PAGLIANO's set-up on the 


Jalso described his set-up on the PowerEdge 


(U//F OU O) Based on his experienced_ 

PowerEdge 2900 as a stand ard email set-u p.l__ 

620 as standard. Moreover. l I described that email messages accepted by the PowerEdge 620 

would first go through MX Logic, a third party company that removes viruses and spam before sending 
the message through Giglinx, the Internet Service Provider (ISP) at Equinix. From there. 


could not recall if the email would go through CloudJacket or the firewall, but he knew they were in 
succession. CloudJacket was an appliance used for intrusion prevention on the PowerEdge 620. 
CloudJacket had pre-configured settings that would block or blacklist certain em ail traffic it iden tified as 


potentially harmful. Occasionally, CloudJacket would send email n otifications tof 
system administrator, prompting him to block certain IP addresses. 


as the 


Jdescribed these 


notificati ons as normal a nd could not recall any serious security incident or intrusion attempt that he was 
aware of. I I could not identify any IP addresses, or their country of origin, that were involved 

in a brute force attack (BFA) against the PowerEdge 620. Email traffic would then go through the switch 
and to the Pow erEdge 620 where it would be processed by Microsoft Exchange 2010. Additionally, 
installed Trend Micro AntiVirus and later, Webroot AntiVirus. 


(u// fouo£ 


stated the CESC client originally requested to encrypt email such that 
no one but the user could read the content. This, ultimately, was not the way the email wa s configured so 
that sys tem administrators co uld troubleshoot all p roblems occurring within user accounts ! 

|as having system administrator rights to the PowerEdge 


recalled 


end 
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620, although_[believed he handled almost all issues entirely._was seldom used, if at 

all, for work on CESC. System administrators could move mailboxes, change and reset passwords, and 
sometimes view email for archive searches when the users didn't have the time and CESC requested PRN 
complete the task. After PRN took c ontrol of the ser ver, the CESC client never requested another 
individual have administrator access. [ stated BRYAN PAGLIANO's password for the 

PowerEdge 2900 was changed and he did not have access to the PowerEdge 620. The CESC client did 
request 24 hour access to someone who could assist with any issues that should arise regarding their email 
accounts. In order to meet this request, PRN contracted with Level Platforms or Managed Workplace, a 
third-party c ompany used fo r troubleshooting and help desk related issues for any late night or off-hour 
requests tha j I could not handle. The third-party company did not have administrator access 

to the server or email content, but could provid e assistance with troubleshooting devices, connectivity to 
the server and password resets. [stated the help desk service was not used often and the 

CESC client would contact him directly ] [ was unsure, but thought the third party help desk 

service was no longer contracted with PRN for CESC client help. 

(U /T- ON OM n or around 02/2014,_was contacted by someone from CESC, that he 

recalled as_Last Name Unknown (LNU), informing him that she was going to ship him a 

MacBook containing a folder with old HILLAR Y CLINTON em ails. [ recalled no other 

identifying information regarding the MacBook. _[recalled the MacBook being shipped via 

FedEx to his pe rsonal residenc e in | but does not recall any other information regarding the 

shipment. Once l I received the MacBook, he identified the folders containing the H ILLARY 

CLINTON email and recalled five subfolders being labeled 2009 through 201 4.1 Idid not 

recall the specific HILLARY CLINTON email account the tranche was from._created a 

local storage folder under the address hrcarchive@c1 intonemail.com and copied the pst files t o it The 
hrcarchive@diritonernail.coni account was not configured to send or receive email messages. or 

so meone from CE SC, requested that only HILLARY CLINT ON and two ass ociates be granted access, 
but l could no t recall the names of the associates | | shipped the foregoing 

MacBook back to_LNU, but recalled nothing about the return shipment. 


(U//peue ) In or around 0 9/2014. 1 | was contacted by CLINTON aide CHERYL 

MILLS requesting!_Iperform an archive search of all HILLARY CLINTON email, during her 

tenure as Secretary of State, from 01 / 2009 to 02/201 3, sent to or received from an email address ending in 
.gov. It was originally requested that l I bum the foregoing ar chive search to a DVD and 

FedEx it to CHERYL MILLS. Instead of that transmittal ] conducted the foregoing archive 

search, zipped the resulting pst email files, encrypted them with AES256, and used a 
Secure File Transfer Protocol (SFTP) to tr ansfer the files to the workstations of CHERYL MILLS and 
HEATHER SAMUELSON Additionally ,! [ password protected the pst files. Sometime 

shortly after, CHERYL MILLS contacted I 1 and asked him to perform another archive search 

for all email on all accounts in HILLARY CLINTON'S mailbox during her tenure as Secretary of State. 
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_conducted the requested archive search and transmitted it to MILLS and SAMUELSON 

using the same process, an SFTP transfer using AES256 encryption to their personal workstations. 

_|knew no additional detail regar ding the workst ations of MILLS and SAMUELSON. 

Additionally, the archive search conducted by did not contain email from the local storage 

folder hrcarchive/fficli monemail com. 


_ (U/ /FOUO ) I n or around 12/2014,|_ |was put i n touch with an individu al named 

_by someone from the CESC client ] l informed I that HILLARY 

CLINTON and HUMA ABEDIN were going to ha ve new e mail accounts o n a new domain hosted on 
another server not adm inistere d by PRN. I t nformed l I that HILLARY CLINTON 1 s 

new em ail address wa sl [rDhrcofrice.com and HUMA AB EDIN's new email address was 
| |fl)hrcofTice.com . [ requested that I 1 begin forwarding the email from HILLARY 

CLINT ON's hrod17-@c1intonemail com account, hosted on the Pow erEdge 620, to her new 

KMucoftke com account, hosted on anoth er server unknown to_nor anyone 

fr om the CESC client, reque sted ! [ to transfer any archived email to the new serve i reference d 

by|_ | was not aware of any detail related to the new server referenced by|_ 

to include who managed it or what it was being used for. 

(U//H DUO - ) In or around 03/2015. ~ I was contacted by CESC with a request to 

inventory the C ESC mail boxes to determ ine what exists, where it was stored and ho w it was backed up 

_talked with l | to coordinate the request and it was decided_would 

travel to Equinix to ens ure the PowerEdge 2900, 1950 and NAS contained no email data. Once onsite at 
Equinix ] [powered on the PowerEdge 2900, 1950 and NAS and verified no old email data or 

backups existed. When | [ eturned to Equinix in 08/2015 to provide the Power Edge 2900 to 

the FBI, he powered it up to check for any email or backup data The 08/2015 inventory by | 
was not requested by anyone from CESC and was a step taken by PRN. 

(UZ/F OUP i l I stated all email accounts on the PowerEdge 620 had some back-up 

policy. Everything on the PowerEdge 620 was backed up through the DATTO device by taking several 
snapshots of the server daily and maintaining the data for 60 days. Additionally, all accounts had some 
back-up set by the user in their individual email client settin gs. Users could also archive email locally, by 
making .pst files on their computer workstation for exam pi e | [ stated the server just prese nts 

the email to the user - after that, the user could do whatever they want with the email. I did 

not know what any CESC client individual email user's setting was. Additionally, in or around 
08/06/2015, PRN was made aware that DATTO was syncing with the DATTO cloud and storing email 
data related to CESC off-site. This off-site logging to DATTO's datacenter was not requested by PRN or 
CESC. Once the DATTO offsite logging was discovered, DATTO disabled the offs ite logging feat ure 

leaving DATTO with 60 days of CESC email back-up from the day it was disabled._ 

believed DATTO was preserving the offsite email data. 
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_ (U//FO UQ»_[was shown a list of CESC email accounts provided to the FBI by PRN. 

_recognized most of the email accounts and knew that some were added and deleted 

throughout the life of the contract, but couldn't give a t imeframe for th e addition/deletions and wasn't 
aware of all of the users for each account. Additionally .! I was unaware of the devices used by 

each user. When CESC users would acquire a new mobile device, they could configure it the mselves due 
to Microsoft ActiveSync technology on the mobile device. On rare occasions, would have 

to assist old blackberry users with synchronization with the BES. 

(U//F OUO) PRN set -up a share folder on the PRN network for all documentation related to the 
CESC client ! believed PRN took this step to limit the individuals at PRN that had access to 

information regarding the CESC client. 


(U// FO ' WO )|_|believed t hat PRN never used the company Techno+Rescue to recycle 

any equipment related to the CESC account.| |believed that PRN never used Veeam software 

or service to backup the PowerEdge 620. 


(U//F©fcJ0-) PRN never took action to purge or delete CESC email data from the PowerEdge 620 
or DATTO. CESC never requested that PRN purge or delete email data associated with their account. 

(U//P OU €h)_was aware of no discussions with CESC regarding classified 

information or retention of federa records. 
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On February 18, 2016. 


date of birth 


interviewed by Federal Bureau of Investigation (FBI) Special Agent (SA}j_ 


was 
and SA 


_at the offices of Plat te River Netwo rks (PRN), 5700 Washington Street, Denver, 

CO. Also present for the int erview were SA l I Informa tion Technology Sp ecialist/Foren sic 

andl 


Examine d 

TfromI 


Departme nt of Justice (DOJ) Attorney 


the nature of the interview £ 


Af er being advised of the identity of the interviewing agents and 
provided the following: 


(U//F OUO ) MONICA HANLEY contacted 


via email on or about February 2014 


regarding email belonging to HILLARY CLINTON The email was stored on a Macbook and CLINTON 
did not want to lose the email, so HANLEY requested ! I transfer it to the Clinton Executive 

Services Corporation (CESC) server (Server) managed by PRN. The Server housed four virtual 
machines: a Micr osoft Exchange server, a BlackBerry enterprise server, an administrative server, and a 
domain controller. 


support application called ScreenConnect. However,!. 


Jattempted to acco mplish the task v ia a remote session using a remote 


ScreenConnect since the email was stored in the Macbook's Mail program. Therefore,] 
HANLEY ship him the Macbook so he could import the mail files manually. 


was unable to imp ort the files usin g 

had 


(U//FOUO) Upon receipt of the Macbook 


previewed the files and noticed there 


were several mail folders and each was labeled with a different year from 2009-2013. He then conducted 
a Google searc h to identify an appropriate method for converting the Mac Mail files into .pst files. 

I believed he used Gmail as a way to convert the Mac Mail files to a format that could be 


imported into the Microsoft Exchange server. Once the conversion was complete, he created a new 
mailbox name d HRC Archive . It was likely a regular Microsoft Exchange mailbox that could send and 


receive email. 


did not recall who had access to the mailbox. Once the import onto the 


Server was su ccessful, he del eted the email from the Macbook, but did not use any data wiping tools on 


the Macbook. 


never deleted the HRC Archive mailbox from the Server and believed it 


should still exist there today; however, users with access to the mailbox could have altered its contents. 
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(U//FOUO) In April 2014,[ 


Iremotely instructed] 


On 02/1 S/2016. Pane 


access the HRC Archive mailbox using Microsoft Outlook on her computer, 
provided this assistance using the ScreenConnect application. 


how to 


likely 


(U//TOU0-) After reviewing several documents dated in and around July 23, 2014, 


stated in July 2 014 he had a conversation with CHERYL MILLS during which she requested 

export a .pst file with all email in CLINTON's mailbox that was sent to or received from a 


.gov email add ress (July Export) After reviewing a list of pst files modified in or around the same time, 
I opined he might have attempted the July Export using different tools, such as Outlook or 


PowerShell. He did not recognize the file na me export.pst After completing the July Export and 

^burned DVDs of the files and arranged for a 


verifying it would open correctly in Outlook, 


FedEx pickup the next day. However, MILLS susequently requested a secure electronic tr ansfer of the 
files instead of shipping physical media. Once the secure electronic transfer was complete,[ 
destroyed the DVDs by breaking them in half. 


(U//f OtfO ) A fter reviewinu a July 24, 2014 email from BRYAN PAGLIANO regarding a regular 


expression text editor,! 


explained when a user changes his or her email address, Outlook 


updates the old email address with the new email address. MILLS was concerned CLINTON's then- 
current email address would be disclosed publi cly and would b e different from the one CLINTON was 
using at the time the emails were actually sent. I l and PAGLIANO discussed using a regular 


expression text editor to find and replace the new email address with the old, but the tool could not 
accomplish the replacement. 


(U//EeHO) 


used the email address[ 


ITU 


com as an account 


to test email flow when he worked on the Server. It was a “dummy" account he used to test email issues 
for various PRN clients. 


(U//F OU9 ) After reviewing work tickets from July 29-30, 2014,1 


stated the 


ScreenConnect remote sessions with MILLS and HEATHER SAMUELSON were for the purpose of 


transferring copies of the July Export to their Windows workstations. Prior to the transfer 


t 


password-protected the .pst, then placed it in an Advanced Encryption Standard (AES) zip file. The 
ScreenConnect tunnel was also encrypted, resulting in three layers of protection. 


(U//F0UO) After reviewing an invoice dated August 12, 2014, 
SAMUELSON in reconnecting to the July Export archive. 


stated he assisted 


(U/ / F OUO ) After reviewing a wo rk ticket dated September 29, 2014 and invoices d 
September 30, 2014 and October 1,2014, | ~1 stated he spoke with MILLS about 

a new email archive export (September Export). ! I could not recall if the Septe 


consisted of the complete live mailbox belonging to CLINTON, the exported emails from t 
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Archive mailbox, or both The September Export was several gigabytes in size, 
place any limitations or delete any content from the September Export. 


did not 


(U//FOU©) After reviewing a work ticket dated November 18, 2014, 


stated he 


worked with S AMUELSON to reestablish her connection to an archive of CLINTON's emails. 

could not recall if it was to the July Export, the September Export, the live HRC Archive 


mailbox, or something else. 

(U// TOUO ) After reviewing a work ticket dated November 24, 2014 and an email dated the same 
dav J I stated he participated in an urgent call with SAMUELSON regarding more specific 


export requirements. He could not recall the details of the conversation. 

_ (U/ /FO UQ ) After reviewing an administrative server log file from November 24, 2014, 

l explained he used Microsoft Outlook on the administrative server to test any ,pst file 


exports he created for CESC. The testing consisted of opening the pst files to ensure they loaded into 
Outlook correctly. 

• Regarding Outlook Office Alert eve nt log entries indicating a mailbox and a “gov export” 

^ peculated they were deleted because they were no longer 


folder were deleted, 
needed on the administrative server. 

Regarding the log entry referencing “huma-gmail-yahoo.pst.lnk,” 


stated HUM A 


ABEDIN requested her email from Gmail a nd Yahoo be imported into her mailbox on the 

~j :ould not recall when ABEDIN requested this 


Microsoft Exchange server, 
assistance. 


(U//E OUQ ) After review ing a do cu ment where “HR C Archive” is referenced in the Windows 


Jmp,[ 


]stated he believed this file to be a reference 


Messaging Subsystem profile for 
related to the transfer of email from the Macbook he received from HANLEY described above. 
Specifically,^ 


^believed he used the Gmail account^ 


E temail.com to 

effect the transfer to the HRC Archive mailbox. He might have used the Macbook for this process, but 
probably used the Server 

(U// TOU0 ) After reviewing emails dated December 10, 2014 and December 12, 2014, as well as 
work tickets re garding December 9-10, 2014 telephone calls with MILLS and SAMUELSON, 

I stated they wanted the last 60 days of email for CLINTON and ABEDIN in new accounts 


that were not on the Microsoft Exchange server, but did not request the migration of any other content. 
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b6 
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b6 
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b6 
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b6 
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b6 
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b6 
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(U//FOUO) After reviewing an email dated December 11, 2014 with the subject line “RE: 2 items 
for IT support,” and a December 12. 2 014 work ticket referencing email retention changes and 


archive/email cleanup. 


stated his reference in the email to “.. the Hilary [sic] coverup [sic] 
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operation..was probably due to the recently requested change to a 60 day email retention policy and the 
comment was a joke. He did not recall the prior retention policy. 

(U//FOUO) After review ing a work tick et dated January 5, 2015, referencing a remote session 
with MILLS and SAMUELSON, [ stated the session was possibly to remove the July Export 

or September Export pst files from their workstations. 


b6 

b7C 


b6 
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(U//F OUO ) After reviewing a Ser ver log entry fr om January, 5, 2015, noting the installation of 


Ontrack PowerControls (PowerControls) 


stated PowerControls was the software utility 


bundled with the Datto backup device emp loyed as pail o f the CESC Server architecture. It is used for 
Microsoft Exchange server restoration, but | [ did not recall ever taking any actions with it. 

(U//F QUO ) After reviewing a document identifying the “Last Written Time” as January 6, 2015 
for “HRC .gov email Archive.pst, HRC .gov emails.pst, HRC gov emails.pst, and export.pst,” 
_jstated Outlook updates the modification time and date for any pst files attached to a mail 


account when the program is opened. 

(U//P OUO) After re viewing an email dated January 7, 2015 containing a list of mailboxes on the 


CESC server. 


stated he believed the HRC Archive mailbox should still be on the Server in 


the possession of the FBI. He did not know why it would not be on the server and said he would check 


the current server for the existence of an HRC Archive 
mailbox, but not the existence of it. Only 


% 


ailbox. Users could control t 
nd 


to login to the Server as an administrator and remove a mailbox, 
the mailbox, nor did anyone request he remove the mailbox. 


stated 


he content of a 
had the capability 
he did not remove 


b6 
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b6 

b7C 


b6 
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(U/ /FOU O) After reviewing ad ministrative serv er log entries rangi ng from January to Octo ber 

used 


2015, referencing multiple Google Apps[ 


stated the office of]] 


Google Apps for business, so he used Google migration tools to pull the email accounts of users from her 
office to the Microsoft Excha nge server. January 2015, however, was not the correct timeframe for that 


migration an 


€ 


did not recall what he might have used Google Apps for in January 2015. 


(U/ /FOU O ) After revie wing an email dated March 5, 2015, referencing! 


stated he did not know[ 


from 


]and did not recall implementing any 


Security Pursuit, 
new security features during that timeframe 

(U//FOUO) After reviewing an emai l dated March 3, 2015, referencing a .pst file containing all of 
“HRC's emails to/from any .gov addresses,” ! | stated he used filters based on sending and 

receiving email addresses, as well as a date filter for CLINTON 1 s time as Secretary of State to produce 
the July Export. 
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After reviewing an email dated March 5, 2015 with the subject line “RE: Share,” 
stated the shared drive was located on PRN hardware in Denver It was a limited access 


shared drive for individuals working with CESC. 

( U//FOUO) After reviewing an email dated March 5, 2015 with the subject line “RE: CESC 
Firewall,”_stated . HRC 1 s backup device...” referred to a second mobile device that 


belonged to CLINTON. He did not recall any details about the device. 

(U/ /FOUO ) After reviewing a document with information co ncerning “expor t.pst, HRC archive - 

b tated. based on the 


complete.pst, and hrcarchive@clintonemail.com - HRC archive.ost,’ 

Last Written Time in the registry, that export.pst existed on the administrative server as of March 7, 2015. 
He did not recall when it was removed or who removed it from the administrative server. 


(U//Fey©) After reviewing work tickets from March 7-8, 2015 


stated he 


determined the Cisco Network Attached Storage device brought to the Equinix data center when PRN 
took possession of CESC's predecessor server and associated equipment did not contain any email 
content PAG LIANO had used it for extra storage and it only contained BlackBerry server logs. 

did not know what was on the external USB hard drive that was also part of the predecessor 


server architecture. PRN did not use either device as part of the Server architecture they designed and 
implemented. 

(U/ /FOU G H After review ing an email dated March 9, 2 015 with the sub ject line “Re: Email/Data 


Systems,” where[ 


is listed as one of the recipients. 


stated he did not recall 


seeing the preservation documentation from DAVID KENDALL referenced in the email. 

(U// FOUO) After reviewin g work tickets d ated March 10, 2015 and March 12, 2015, referencing 
the movement of email for MILLS, ! I stated MILLS did not have an account on the Server 

and he could not recall what work he might have done for MILLS MILLS occasionally contacted 

with problems related to her personal email account, so the work tickets may have been of 
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b6 

b7C 


b6 
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b6 

blC 


that nature. 


(U//FO UO) After reviewing an email dated March 25, 2015 with th e subject line “C ESC call,” 

l :hen reviewed 


stated he had no recollection of the call or what it was about. 


2015 


an email dated March 25, 2015 with the subject line “Clintons” and a work ticket dated M arch 3 

referencing a conference call with KENDALL and MILLS. At this point in the interview,_ 

PRN's counse l, advisedl I not to answer any questions related to conversations 


with KENDALL based on 


protections under the Fifth Amendment. 


(U/ / F OUO ) After reviewing log files dated March 31, 2015. refer encing multiple manual 


deletions from the Datto server used to backup the Server, 


stated he did not recall 
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performing the deletions, nor did he recall being asked to delete backups from the Datto server. 

_Jfurther stated everyone at PRN has access to the Datto client portal, which is used to 

manage the backups for all of PRN's clients who employ Datto's services. 
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(U//f-OU0‘) After reviewing lo g files dated M arch 31, 2015, referencing the installation of 
BleachBit on the administrative server, [ stated he believed he used the program for the 
removal of .pst files related to the various exports of CLINTON's email discussed above from the 
administrative server. He took this action of his own accord based on his normal pr actices as an en gineer. 
He did not recall which settings he used, to include the overwrite free space feature. I I later 

stated he might have used BleachBit on the Microsoft Exchange server because any pst exports would be 
created there, then moved over to the administrative server and opened to verify the exported pst file 
worked correctly. 


]does not recall who or when the conversation occurred, but someone 


from CESC told him at some point s/he did not want the pst files hanging around and wanted them off of 
the Server after the export. 


(U/ /FOUO) After reviewing a text document with the first line “June of 2013,”|_ 

stated he did not recall creating the document. However, the statement “PST Files were shredded” is 
probably a reference to his use of BleachBit. 
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(U//E OH 9) After reviewing log files from the administrative server dated January - October 

I stated the reference to Google Apps Sync on April 4, 2015 was possibly an automatic 


2015, 


update to the software. 


b6 
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(U//E O UQ } After reviewing an email dated April 24, 2015 with the subject line 1 1 4/27-5/1,” 

I stated the entry on April 27, 2015 was a calendar appointment related to regular 


maintenance of the Server and associated equipment. 
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(U// FO UO) After reviewing an email dated August 18, 2015 with the subject “RE: email,” 
[ stated CESC w anted to verify t hey had a 60 day retention policy. He believed 


misspoke when 


^commented on a 30 day retention policy. 


(U//FOUO) After reviewing an email dated August 21, 2015 with the subject line “RE: Datto 
remote access ” and an email dated August 20, 2015 with the subject line “RE: CESC Datto,” 

_stated PRN might have received a new Datto server because in the initial setup of the 

original Datto server, it auto synced with the Datto data center and created an offsite copy. The new 
Datto server would not allow that to happen. 


b6 

b7C 


b6 

b7C 


UNCLASSIFIED//F©U© 



UNCLASSIFIED//■fQtJCT 


FD-3()2a (Rev. 10-6-95) 


Continuation of FD-302 of_ Interview ot^ 


1 


On 02/18/2016 . Page 


7 


(U/ /FOUQ ) After reviewing logs dated September 21-September 26, 2015 f rom the Microso ft 
Exchange server and September 25-October 2, 2015 from the administrative server,_ 


speculated he may have removed mailboxes attached to Outlook on the administrative server. He was not 
instructed to delete any user mailbo xes on the Micr osoft Exchange server in September 2015, nor did he 
delete any mailboxes. Furthermore, ! I did n ot do any work with any email exports in the 

September 2015 timeframe. It was standard practice for | | to install OnTrack PowerControls 

on a server because it is required to restore a system from a Datto backup. Additionally,] 


would login to the Datto server during regular maintenance appointments to check th e backups. 
Regarding the October visits to the CESC Datto Control Panel referenced in the logs, _ 


or 


probably logge d into the Datto s erver using ScreenConnect to verify it was running 


properly. ScreenConnect was! 


primary method of connecting to the administrative server. 


(U/ /FOHO ) 


did not recall manually running a disk defragmenting utility, but would 


sometimes do it as part of routine maintenance. 
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(U// FOHO ) 


kvas shown several 


All documents used during the interview are attached 


other documents for which 
to this communication as a 


he had no information. 

1A. 
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(U/ /FO UO ) On May 3, 2016[ 


3 and SA 


I Platte River Networks (PRN). da te of birth 
was interviewed by Fede ral Bureau of Investigation (FBI) Special Agent (SA) | 


at the United States Attorney's Office for the Eastern District of 
Virginia located at 2100 Ja mieson Avenue, A lexandria, VA 22314. Also present for the interview were 
Supervisory Spec ial As>ent | Informati on Technology S pecialist/Fore nsic Examiner 


[ 


Department of Justice (DOJ) Atto rney! 


I and EDVA Attorn ey! 


EDVA Attorney 

counsel J _| and|_ 

the interviewing agents and the nature of the interview! 


]_DOJ Atto rney 
as well as 


□ 


After being advised of the identity of 
provided the following: 


(U//F0W0) In February 2014, 


^worked with MONICA HANLEY to import an 


archive of HILLARY CLINTON 1 s email from an Apple MacBook to the PRN-maintained server hosted 
for the CLINTON EXECUTI VE SERVICES CORPORATION (CESC). This server hosted CLINTON’s 

email account. HANLEY told_the MacBook contained old email that only existed on the 

laptop and HANLEY did not want to lose it. The email was stored in M ac Mail within folders labeled by 

year as 2009 Inbox, 2009 Sent Items, 2010 Inbox, 2010 Sent Items, etc. _tried to effect the 

transfer of the archived email through a remote session using ScreenConnect, but the WiFi connection 
was intermit 
MacBook to 
of the email files. 


ent and the MacBook repeated ly turned itself off. Therefore, HANLEY shipped the 

was unaware of a USB flash drive containing an identical set 
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(U/ /FOUO) [ 


trie d various tools and Googled for solutions to effectively transfer the 


email files. A fter researching option s. 


Itransferred all of the email content to the “dummy’' 

gmail account|_frDgmail.com. l [ connected the administrative server to 

the gmail account and used it as a bridge to move the email into a mailbox named hrcarchive on the 
Exchange server. The PRN architecture consisted of a BlackBerry Enterprise server, domain controller, 
administrative server, and Microsoft Exchange server (PRN server). After the transfer was complete, he 
deleted the content from t he gmail account and provided the hrcarchive login credentials to HANLEY or 

l and demonstrated ho w to access the mailbox using Outlook Web Access, 
did not know if ) l or HANLEY provided the credentials to others; however. 


anyone with the credentials could access the account. Prior to shipping back the MacBook, either 
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HANLEY oi]_[requested the email be deleted from the MacBook. 

files containing the email, but did not use any special t ools to remove the files, 
an address for the return shipment of the MacBook and 
Service or United Parcel Service. 


deleted the 
provided 


used either the United States Postal 


b6 

b7C 


b6 
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and 


(U/ /FOUO ) 


all had access to the prnadmin account credentials to access the PRN server. The 


account on the server maintained by BRYAN PAGLIANO was created by PAGL1ANO 
during the transition to the PRN server. There was also a built-in administrator account on the PRN 


server. 


, but[ 


never used it. 


CLINTON's account, while 


]handled most day-to-day work tickets for 


Jhandled the physical infrastru cture setup and maintenance. 
was au thorized to work on the account and served as a backup te l l and 


utnonzea to work on tne account ana served as a Pack up 
| however, he only handled a few work tickets. I [ 1 


eft PRN in June or July 2015 and. 


based on PRN's normal business practice, passwords were changed for all admin accounts. 


(U// POUO ) In July 2014, CHERY L MILLS emailed[_ 

the call, MILLS outlined t d I she needed an export of al 

received from a .gov email a ddress (July Ex port) for the purpose of 
Department of State (State). 


.ncL 

prori 


| to schedule a phone call. On 
LINTON 1 s email sent to or 
dr - them to the United States 


^searched “*.go v” in the l ive “ H ” iailbox to find email 
responsive to MILLS' request. After preparing the export, ! ~™~| worked with MILLS and 


HEATHER SAM UELSON to tran sfer the export to each o f their v orkstations. This interaction was the 
first with MILLS.! 


previously interacted with[ 


MILLS served as the 


primary contact from which|_ 


and 

took direction for 


[only interacted with SAMUELSON once or twice beyond 


this export and later exports, 
troubleshooting her access to the exports. He described MILLS and SAMUELSON as proficient 
computer users with knowledge of basic programs. 


b6 

b7C 


b6 

b7C 


(U// EOUO ) Based on the direction provided by MILLS as described above,, 
prepared an export of CLINTON's email from her live account on the PRN server. 


then 


used 7-Zip to compress the export and password-protect it. To transfer the export to MILLS and 
SAMUELSON, he connected to each of their workstations remotely using ScreenConnect and installed 7- 
Zip. On SAMUELSON's laptop he also installed Outlook 2013 because she did not have Outlook at that 
time. After the installation of 7-Zip on both workstations and Outlook 2013 on SAMUELSON's 
workstation, I [ transferred the zip file using Secure File Transfer Protocol (SFTP), unzipped 

the export, and opened the export in Outlo ok by navigating to it using File->Open->Outlook Data File. 
When transferring the file, l likely dropped it on the desktop or in a folder on the C: drive. 


b6 

b7C 


land requested an export of 


(U/7F OU 9) In September 2014, MILLS co ntacted! _ 

CLINTON'S entire mailbox (September Export), so_followed a similar process to the July 

Export. He prepared a .pst file, zipped it using 7-Zip, and transferred it to MILLS and SAMUELSON 
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through ScreenConnect. In the preparation of this ex port. I _| discussed different options for 

the transfer based on the size of the file, but ultimately deci ded on the same process using ScreenConnect 
as the July Export. MILLS never req uested assistanc e from ! in locating CLINTON's email 


from January 2009 - March 2009 and 
timeframe. 


was never aware there was a gap during that 


(U/ /FOUO ) [ 


did not know why the .pst file provided to the FBI from CLINTON's 


_ _ .p st 

counsel contained the email address P [5) gmail.com in the metadata because he 

beh&ycd he created email exports from CLINTON's live email mailbox. However, he provided the 
following-possible explanations: 


[may have imported HRC Archive into CLINTON 1 s live mailbox. 


• A user may have moved email from HRC Archive into CLINTON's live mailbox. 

• A user may have taken email directly from the HRC Archive mailbox to produce what was 

~l did not assist in the production of any .pst files provided to State. 


provided to State. 


(U//FOWO) During the July Export and September Export] 


transferred one pst file. 


contained within a zip file, to MILLS and one to SAMUELSON. Their laptops were running either 
Windows 7 or Windows 8. 
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b6 
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b6 
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(IJ//F O U B) After reviewing a chart labeled “PST files and Outlook Profiles - Admin Server,” 
_stated “HRC uov email Arc hive.pst,” “HRC .gov emails.pst,” and “HRC gov emails.pst’' 


reference the July Exports. 


^described the other files as: 


“HRC archive - complete.pst” references the September Export. 

“hrcarchive@clintonemail .com - HRC archive ost” is a remnant of the transfer of files from the 
HANLEY laptop described above to gmail. 

I ~te gmail .com - | | - temp.psf j 

this .pst file. 

“huma-gmail-yahoo.pst” was a result o | 


could not recall creating 


importing HUMA ABED IN's email from 


those services to the PRN server. 


b6 
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b6 
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(U//FO UO) After reviewing a PRN invoice referencing an October 1,2014 call with MILLS, 
stated the call was in relation to one of the pst file transfers. 


(U//F Q H O) After revie wing a PRN work ticket dated November 18, 2014 referencing a call with 


SAMUELSON,| 
email archive. 


stated he worked with SAMUELSON to reconnect her to CLINTON's 
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(U//FOUO) After reviewing an email dated November 24, 2014 with the subject line “MMM,” 
_stated he did not know what the reference to an urgent call was about. 


(U//TOUO) After reviewing a work ticket dated November 24, 2014 referencing “more specific 
export requirements,” I stated he did not know what the more specific export requirements 

were, but did not believe an additional .pst file was transferred. Neither SAMUELSON nor MILLS 
requested ! l assist with searches for emails to/from specific users, emails to/from specific 

domains, or create additional exports beyond the July and September Exports. 


(U// FOU Q) In November or December 2014, MILLS tolc j she did not want the 

exported data on the laptops anymore and requested he securely delete the pst ft es previously transferred 
to MILLS' and SAMUELSON's workstati ons, but did no t specifically request ! | use deletion 

software. Based on the request of MILLS. I I recommended BleachBit, a tool he had used 

previously wit h clients who had financial information on computer equipment being decommissioned. 

[ described BleachBit as a utility that securely deletes files by overwriting data multiple 
times. He could not recall what version he used, but would have downloaded the latest version at the time 
of MILLS' request. Sometime prior to this discussion, MILLS mentioned once CLI NTON'S email s were 
printed for State, she could put the pst file on a flash drive and have a master copy. | | had the 

impression MILLS was referring to all of CLINTON's emails, not just those provided to State. 


CUZ/P QUO l l I used the same deletion process for the workstations of both MILLS and 

SAMUELSON He initiated a remote session, typically while on the phone with MILLS or 
SAMUELSON, to each workstation using ScreenConnect and downloaded BleachBit from the Internet, 
then installed the software. He used BleachBit to remove the .pst files by running the shredding function 
as a standard u ser, not an administrator. The proc ess took a few m inutes to complete during which 

_did not encounter an error message. | | believed he shredded a total of eight 

files - the two zip and two pst files on each laptop from the July and September exports. He did not 
recall: 
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b6 
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• Altering any settings prior to shredding the pst files 

• W i pi ng free space 

• Selecting artifact clean up 

• Verifying the deletion of the files 

• Selecting “Shred Settings and Quit” once the process was complete 

• Targeting any temporary files 

• Uninstalling BleachBit 

(U//FO UO) After reviewing work tickets dated December 12, 2014 and January 5, 2015, 

stated the work tickets reflected the tasks he completed to remove .pst files from the PR.N b6 
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server and the workstations of MILLS and SAMUELSON. The request s from MILLS were routine 
customer service, so no one else at PRN was aware of the removal tasks l I completed beyond 

what was written in the w ork tickets. Since completion, neither MILLS nor anyone else from CESC 


contacted 


to verify this work was complete. Additionally 


was not contacted 


by anyone to discuss the process he used to remove the files from the workstations. 


(U/ /FOUO) In March 20 15, MILLS con tacted ) - 
Typically, MILLS would contact l~ l usingthe email address 


to discuss C LINTON's email. 

gmail.com and setup a 


time to call. MILLS wanted to know what backups of CLINTON's email existed and where those 
backups were located. After discussi nu the potential for content to exist on the server CLINTON used 
prior to the PRN server, PRN decided l ~l would travel to the datacenter in Secaucus, NJ to 

power up the ol d equipment (P redecessor server) and check it for any backups or copies of CLINTON' s 
mailbox. Afterl l arrived at the datacenter and turned on the old equipment. I 

spoke with l | w~hile they both were logged on to the system. Neither the Cisco Network 

Attached Storage (NAS) device nor the external USB hard drive that were part of the architecture for the 
Predecessor server contained backups or other data associated with CLINTON's email. 


b6 

b7C 


b6 

b7C 


b6 

b7C 


(U/ /FOU O- ) PRN used a Datto backup appliance to backup the PRN server a nd it was PRN' 


common practice to include the administrative server as part of the Datto b ackup, but I 
not specifically recall if the administrative server was backed up for CESC. 


, s 

could 


Jhad 


no memory 


of stopping Datto backups of the PRN administrative server on March 8, 2015. Datto recommends 
turning off Windows Volume Shadow Copy service because it can interfere with Datto backups. 


(U//TOW) 


b6 
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b6 
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(U//FOU0) After reviewing an email dated March 25, 2015 with the subjec t line “CESC call” and 


an email dated March 25, 2015 with the subject line “Clintons [sic],’ 
recall the content of the call or the reference to backups in the email. 


stated he could not 


b6 

blC 


(U// FOU O) After review ing a document titled “Exchange Audit Logs” dated March 25, 2015 and 

stated the Platte Admin mailbox received firewall alerts and other internal 


March 31, 2015, 

system alerts._ Additionally, the Platte Admin account was used to effect changes on other mailboxes. 

did not specifically recall using it to provide full access for prnadmin to the mailboxes H, 


HDR29, and HRC Archive on March 25, 20 15 and then removing the HRC Archive mailbox from the 
Exchange server. However, [ believed he had an “oh shit” moment and removed the HRC 


Archive mailbox. He also changed the mailbox retention policy from 30 days to 1 day, and cleaned the 
mailbox database because MILLS previously requested in late 2014 or early 2015 he change the retention 
policy for CLINTON and ABEDIN's existing and ongoing email to 60 days. He removed the HRC 
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Archive mailbox manually because all content in the mailbox was older than 60 days, 
changed the deleted items retention policy from 30 days to 1 day to ensure no email outside of the 60 days 
remained on the server and executed the Clean-Mailbo xDatabase comm and to clean whitespace within 

also enabled Circular Logging, but 


the database, similar to running a disk defragmentation [] 


did not recall why he did so in this instance. He typically enabled it when importing email because 
Microsoft Exchange logs contain email that hasn't been committed to a database. Circular Logging 
reduces the log file size by forcing Exchange to commit data to the database immediately. 

(U//FOUO) After reviewing documents titled “BleachBit - P RN Admin Serv er” and “BleachBit - 
Exchange Server” indicating the use of BleachBit on March 31, 2015, 1 [ stated he checked the 

Exchange Server for remaining copies of CLINTON'S email. When he located a .pst file, he used the 
most recent non-beta version of BleachBit available at the time to shred the .pst files on the PRN server, 
but did not recall which pst files he found or removed. He did not wipe free space, encountered no 
errors, an d viewed the fo lders to see if the files were gone, but did not take additional steps to confirm the 
deletions |did not talk with MILLS about the files he found and deleted. 


(U//F OH6 ) After r eviewing log fil es dated March 31, 2015 indicating the deletion of files from 
the Datto backup appliance ] [ stated he did not recall deleting any Datto backups nor did he 

recall receiving an instruction to d elete backups fr om the Datto, however, it is unlikely anyone else at 
PRN would have deleted the files. I 1 did not know if the administrative server was backed up 

to the Datto. 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


(U// FOUO) After reviewing a document titled “PRN Admin Server - Installed/Uninstalled 
Application Events,’]] " 


stated he had no insight into the installation of Google Apps Sync for 


Microsoft Outlook on April 5, 2015. 

(U/ /PQUO ) After reviewing documents titled “Add-MailboxPermi ssion and Remo ve- 
MailboxPermission” and “Export.pst on Admin Server - 9/25/2016 [sic],’'_stated in 


September 2015 he looked into replacement options for the PRN server because he believed the server 
would be turned over to the FBI To prepare for this eventuality, he logged onto the server to verify the 
backups of the server were working correctl y and evaluate what ne w hardware PRN would need to order. 
During the same time frame ] [ restored the mailbox for | This 


restoration may account for the activity related t o Export.pst in Septem ber 2015 and it is unlikely 

]]deleted[ 


Export.pst contained any of CLINTON's email. 


Export.pst after the 


restoration was complete. However, he did not delete any data related to CLINTON's email after he was 
interviewed by the FBI in September 2015. 

(U//F0W0) After reviewing an email dated March 9, 2015 referencing a preservation em ail from 

DAVID KENDALL and a preservation request from the FBI dated July 31, 2015,_stated he 

was aware of the preservation requests and interpreted both as meaning he should not disturb CLINTON's 
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email data on the PRN server. _ l did~ not receive guidance from other PRN personnel or PRN 

counsel, or others regarding the meaning of either preservation request. b6 
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On Se ptember 11,2015 


office teleph one! 


United States Department of State (DoS), 2201 C Street NW, Washington. D.C . 2 0520 


b6 

b7C 


office telephone[ 


Also present was 


was interviewed by FBI Special! 


and 


DoS, 


nature of the interview 


1 After being advised of the identity of the interviewing agents and the 
I provided the following information: 


Principal Officer Electronic Messaging System (POEMS) was a Top Secret DoS email system that 
was phased out several years ago. Today the term POEMS is often used by people referring to the DoS 
email systems provided by the Office of the Secretary, Office of the Executive Secretariat - Information 
Resource Management (S/ES-IRM). While the majority of DoS employees receive IT support from 
Information Resource Management (IRM), a subset of approximately 600 individuals receive IT support 
from S/ES-IRM. This subset is composed of high-level DoS executives and staff, who are collectively 
referred to as the “7 ,h floor.” The S/ES-IRM system was created to provide the 7 11 ' floor users with 
enhanced customer service. 


Despite being administered by separate groups, the IRM and S/ES-IRM systems utilize the same 
hardware and software platforms. Both groups support their respective users across both Opennet, the 
unclassified DoS network, and Classnet, the classified DoS network. The top secret network at DoS is 
operated by the Bureau of Intelligence and Research (INR) regardless of the user. 

S/ES-IRM does not have stand-alone email backup. Historical emails have to be extracted from an 
overall system backup. The volume of available historical emails therefore depends on what each user had 
saved on their system when the system backup occurred. The entire S/ES-IRM system is backed up every 
night during which the email exchange, as well as file servers, shared drives, applications and other 
relevant files are captured. The backup tapes are held for 45 days. S/ES-IRM has pulled the relevant 
S/ES-IRM system backup tapes in response to the preservation re quests issued b y the FBI and is b6 

preserving them until they receive further direction from the FBI | | estimated that b7 ' 

approximately 100 of the 600 S/ES-IRM customers were listed on the preservation request. 


|_Iprovided that the exchange servers are housed at ESOC in Culpeper, VA and that 

the backups are stored at the Harry S Truman building. 
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S/ES-IRM customers do not use the State Messaging and Archival Retrieval Tool (SMART) for 
memorializing official email records. Instead, they follow the “print and file” policy whereby each 
individual is responsible for assessing if a communication should be archived and is then responsible for 
printing and appropriately filing the communication. SMART is primarily used for archiving cable traffic 
and replaced a legacy system known as CableXpress approximately four or five years ago. 

S/ES-IRM does not administer the Public Affairs Communication Electronically (PACE) system, 
which is operated by the Bureau of Diplomacy. PACE is a much smaller system but it is possible that a 
few people from Secretary Clinton's staff may have used PACE 


DoS does not have a restriction on the use of personal email accounts for official business. 
Personal email accounts are often used by individuals in the field who were not issued an official DoS 
mobile device, or who do not have the time or means to remotely log into the DoS system. Employees are 
not required to notify DoS that they are using a personal account for official business and there is no 
mechanism to track who is using a personal email account. In 2009 and 2014, DoS issued official 
guidance to users of personal email accounts that stipulated that they must forward work-related emails 
back to their official work account within a specified period of time for record keeping purposes. 


S/ES-IRM does not automatically create Opennet or Classnet email accounts for new employees. 
Accounts are only created once a request form has been submitted. S/ES-IRM had no record of a request 
being completed by, or on behalf of. Secretary Clinton for the creation of DoS email accounts. Nor were 
there any records of requests being made for a DoS mobile device. 


S/ES-IRM is also responsible for issuing official cell phones and other mobile devices to their 7 ,h 
floor customers. However, S/ES-IRM does not have historical records for devices issued during Secretary 
Clinton 1 s tenure. The system that was used for tracking property during that time period was previously 
taken offline and S/ES-IRM has been unable to restore the system due to the presence of corrupt files. 
While users were required to sign a property record when a device was issued to them, those records 
would have been destroyed once the device was returned to S/ES-IRM 


,_,was not able to provide any specific informat ion about the broader IRM system and 

their effo rts to preserve relevant data. He recomme nded contactind _ 


1 via th e Bureau of Diplomatic Security (DS)£ 


noted that BRIAN PAGLIANO works foil 


contacting IRM. 


and care should be taken when 
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and 


were available for future contact if necessary. 
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(U//FOUO) On January 11, 2016, MONICA H ANLEY was intervie w ed by Federal Bureau of 


Investigation (FBI) Snecial Aaentsf 


land! lat 

b6 

Washington DC 20001. Representing HANLEY, and also present for the 

b7C 

interview, were 

and 

J After being advised of the identities of the 



interviewing agents, and the purpose of the interview, HANLEY provided the following information: 


(U/ / E OUO ) In 2003, following her college graduation, HANLEY interned for then Senator 
HILLARY CLINTON HANLEY's internship position was converted to a permanent position in 2004. 
HANLEY continued working for New York Senator KIRSTEN GILLIBRAND, who was appointed after 
CLINTON was nominated as Secretary of State. 


(U/ /FOU O) In April of 2009, HANLEY received a call from HUMA ABEDIN asking if 
HANLEY would be interested in working for CLINTON as a “Confidential Assistant” at the Department 
of State (DoS). HANLEY accepted the position at DoS, and continued working for GILLIBRAND until 
two days before her start at DoS. 

(U//F OUO ) During her first year at DoS, HANLEY's “Confidential Assistant” duties included 
supporting and scheduling CLINTON, domestic travel and personal appointments. HANLEY also ran 
various errands for CLINTON. HANLEY also served as ABEDIN and JAKE SULLIVAN's scheduler, 
and it was her responsibility to coordinate their schedules with CLINTON's schedule. 


(U/ /FOUO ) HANLEY accompanied CLINTON on foreign travel on a few occasions during her 
first year at DoS. HANLEY's first overseas DoS travel with CLINTON was to the Philippines. 
CLINTON specifically invited HANLEY to join her on that trip because CLINTON knew HANLEY was 
of Filipino decen t and would appreciate th e opportunity to trave l there ABEDIN almost always traveled 
with CLINTON. | land 


with HANLEY in regards to accompanying CLINTON on foreign travel. 


Iwere additional aids who rotated duties 


(U//F0UO) When ABEDIN became pregnant in 2011, HANLEY became a primary trave ler and 
accompanied CLIN TON on most of her foreign trips. I l and 


were also part of CLINTON's travel team during this time 


for managing press matters, whereas 


was responsible 


were responsible for protocol. 
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(U// FOU Q) HANLEY went through a full day of on board training her first day at DoS, of which 
approximately half was security related. HANLEY recalled learning specifically how to handle and 
transport classified information/paper, but could not recall who provided the training. HANLEY received 
a Top Secret/SCI clearance at DoS, but was unsure of any specific codeword programs for which she may 
have additionally received read-ins. HANLEY did not hold a security clearance prior to DoS. 


(U/ / F QUO) HANLEY did not recall ever receiving Freedom of Information Act (FOIA) training, 
and the only training HANLEY received concerning the Federal Records Act (F RA) came near the end of 
CLINTON'S tenure at DoS A representative from DoS' s record keeping office. 


^Last Name 


Unknown (LNU), met with HANLEY and others on CLINTON's staff and instructed them to produce all 
records that “changed, effected, or created policy.” HANLEY recalled going through paper files with 
other executive Staff members, and placing the papers in stacks in the hallway outside the Secretary's 
Suite. After which, a DoS record keeper would review the production and make the final determination 
on which information was relevant to the FRA. 


Email Accounts and Server 


(U/ /FOUO ' ) During her time in the Senate, CLINTON used hrISflyatt,blackberry,net . HANLEY 
was aware of this email account, but did not use this account to communicate with CLINTON. 


(U//F 6UO) CLINTON used hrod i 7fc.’ci intonemail.com while she was Secretary of State, and 
hdr22@dintoneinail.coni following her departure from DoS. 


(U/ /FOUO ) HANLEY did n ot initially re call the account 


the interview HANLEY deduced thd 


Pgmaii .com. however, later in 


•ft girt ail com account may have been created as a way to 


communicate with CLINTON during a bad storm in 2011 when power to the server hosting 
h d r22 @c l imonemail.com was lost. HAN LEY believed CLINTON was traveling in Croatia at the time, 
and HANLEY and | | may have created the account as a temporary way to communicate 

with CLINTON during the outage 


(U// FOUO) HANLEY was not familiar with the email address SSHRC@state.gov . HANLEY 
vaguely recalled CLINTON being issued a DoS Blackberry, but CLINTON did not use the DoS issued 
device. 


(U// FOU O’ ) HANLEY was aware CLINTON was using a personal email address on a personal 
server for DoS business while CLINTON was Secretary of State. JUSTIN COOPER created, installed, 
and maintained the server in Chappaqua before the server was transitioned over to Platte River Networks 
(PRN). HANLEY could not recall when the transition to PRN occurred. COOPER was HANLEY's 
point of contact for assistance in regards to syncing CLINTON's mobile devices to the server. Anytime 
CLINTON got a new device, HANLEY would contact COOPER who would troubleshoot her through the 
process of setting up the new device with the server. COOPER was also HANLEY 1 s point of contact 
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when needed reimbursment for items she purchased for CLINTON. COOPER was located in New York, 
so most of HANLEY 1 s interaction with him was via email or telephone. 

(U// TOUO ) BRYAN PAGLIANO was part of CLINTON'S 2008 Presidential Campaign and was 
later employed by DoS in a technical capacity. HANLEY would contact PAGLIANO for help with 
physical Blackberry problems. 

(U/ /FOUO ) HANLEY did not recall ever participating in, or overhearing, any discussion over 
records retention issues, nor the legality of CLINTON conducting DoS business off a private server or 
email account. 

(U/ /FOUO ) HANLEY was asked to review a few emails forwarded from CLINTON at 
hrodi 7@clintonemaii.coir; to HANLEY's DoS email account wherein CLINTON asks HANLEY to print 
the forwarded email. After reviewing the email, HANLEY explained CLINTON did not like reading 
things on her Blackberry because it was difficult to read the small font, so she preferred a hard copy for 
longer emails. Sometimes CLINTON would keep the hard copy to archive the document, but HANLEY 
was not privy to what documents CLINTON had printed for an easier read versus archiving. 

_ (U/ /FOU Q) HANLEY used two email accounts while at DoS: hanlevmr@state »ov and 

lffigmail.com . HANLEY did not have an @clintonemail.com email account, nor was she 
ever offered an @cli ntonemail.com account. As a way of general practice, HANLEY tried her best to use 
her state.gov email account for work related matters and her Gmail account for personal interactions with 
CLINTON. HANLEY further explained she considered personal interactions with CLINTON to include 
things like scheduling hair appointments. However, HANLEY noted that her state.gov email account was 
not as easily accessible as her Gmail account and on some occasions she use Gmail when she could not 
access her state.gov account. 

(U//P OUO ) HANLEY was issued and carried/used a DoS Blackberry. It was difficult to access 
DoS email while on travel, as the DoS system required users to sign in using a token/key to sign in 
remotely. It was particularly difficult to sign into the DoS system in the Secretary's plane because the 
wifi was not always compatible, so HANLEY would often use her Gmail account while in the air. The 
same was true for foreign travel Many DoS employees used personal email accounts because they were 
more easily accessible. ABED1N emailed HANLEY equally from her state.gov and personal accounts. 

Mobile Devices 

(U/ /F0U0 ) After she reviewed pictures of various Blackberry models, HANLEY pointed to the 
picture of the Curve 8310 explained CLINTON preferred the Curve 8310 because she found the 8310 
“track-ball” feature easier than the “track-pad” on newer Blackberry models. CLINTON tried the 
Blackberry 8700G, but did not like the device because of the “track-pad.” HANLEY also thought the 
Curve 8900 looked familiar. HANLEY did not recall the specific Blackberry devices CLINTON used at 
DoS, but believed CLINTON's original Blackberry was black in color and housed in a blue silicone case. 
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(U//FOUO) HANLEY recalled helping CLINTON change her Blackberry device at least three or 
four times while she was at DoS HANLEY recalled having to replace CLINTON's Blackberry on one 
occasion after CLINTON spilled coffee on the device. Another time HANLEY recalled having to replace 
CLINTON'S Blackberry because it started to slowly fail overtime HANLEY recalled proactively trying 
to purchase replacement Blackberrys for CLINTON at one point, but CLINTON only liked the older 
models. HANLEY believed she may have even purchased one of the older Blackberry models CLINTON 
liked off of Ebay. 


(U//F QUO ) HANLEY would contact COOPER after purchasing a new Blackberry device for 
CLINTON, and he would instruct HANLEY as to how to connect the device and sync the device with 
CLINTON's server and email. Once the new device was properly synced, COOPER would also talk 
HANLEY through the process of wiping the old device. HANLEY would provide the new Blackberry to 
CLINTON along with the old/wiped Blackberry. However, HANLEY was not sure what CLINTON did 
with the old Blackberry after HANLEY turned them over. 


(U/ /FOUO) Aside from receiving emails on her Blackberry, CLINTON used her Blackberry to 
text and pin short personal messages. 


(U/ /FQUQ) CLINTON also used an iPad. HANLEY could not recall when CLINTON obtained 
the iPad, but thought it may have been purchased by COOPER. HANLEY was not sure who configured 
CLINTON's iPad. CLINTON predominately used the iPad in the evenings and while on travel (both 
domestic and international) for reading news articles and emails. CLINTON did use the iPad to send and 
receive emails. CLINTON did not use the iPad while she was in her office at DoS. 


(U/ ffOUO) ABEDIN, HANLEY, and 


had access to CLINTON'S iPad on occasion to 


assist CLINTON if her iPad was not working properly, but HANLEY could not recall CLINTON giving 
her iPad to anybody else to use. 
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(U/ /FOUO ) CLINTON received a new iPad in 2011 and gave HANLEY an iPad around the same 
time. HANLEY assumed CLINTON gifted her with CLINTON's old iPad. Agents asked HANLEY to 
review an email exchange dated 8/18/2011 between ABEDIN and COOPER in which ABEDIN tells 
COOPER “She [presumably CLINTON] doesn't like ipad 2...” and later typed “She gave to monica as a 
birthday gift.” After reviewing the email, HANLEY explained that she assumed she received CLINTON's 
old iPad, but now realizes she likely received CLINTON's newer iPad. HANLEY was not aware the iPad 
was a birthday gift, but stated that it was not uncommon for CLINTON to gift ABEDIN and HANLEY 
with some of her personal items she no longer wanted. 


When HANLEY received the iPad the opening screen said “H's iPad,” so before 
using the gifted iPad, HANLEY wiped the device. HANLEY used the iPad for personal use up until the 
time she moved back to New York in 2014. Prior to moving, HANLEY gave the iPad to 
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_| so he could use th e iPad to listen to music and podcasts. HANLEY did not 

wipe the iPad prior to gifting it to 

(LJ/ /rOU Q) In October of 2013, HANLEY received a call from CHERYL MILLS who inquired 
about the iPad. HANLEY explained she received what she believed was CLINTON's old iPad as a gift 
from CLINTON in 2011. MILLS subsequently informe d HANLEY she needed to turn over the iPad in 
response to the FBI's investigation HANLEY contacted to retrieve the iPad and turned it over. 

Laptop Computer 

(U//EOW©) After they learned longtime friend of CLINTON, SIDNEY BLUMENTHAL, was the 
target of an email hack in Spring of 2013, PRN spoke with COOPER, ABEDIN, and HANLEY, and 
advised CLINTON change email addresses. CLINTON did not want to lose her old emails when she 
changed her email address. COOPER subsequently provided HANLEY an extra Apple Macbook from 
President Clinton's Harlem, NY, Office. HANLEY then transferred all of CLINTON'S old emails from 

the P RN server to the Macbook Air. HANLEY transferred the emails to the Macbook in her_ 

| 1 apartment, and noted that it took several days because she transferred four years of emails. 

HANLEY also recalled transferring the emails to a thumb-drive, but could not recall what happened to the 
thumb-drive. 

(U/ /FOUO ) HANLEY maintained possession of the Macbook following the transfer of the emails. 
The Macbook was stored in HANLEY’s apartment. HANLEY moved at least once after she transferred 
the emails to the Macbook, and brought the Macbook with her to her new apartment. 

(UZ/F OtfO) HANLEY continued to work for CLI NTON following DoS, and in early 2014 took a 
position in th ^ | Shortly thereafter, HANLEY realized she still 

had possession of the Macbook containing CLIN TON's archived emails . H ANLEY subsequently 
contacted PRN on her own accord and spoke with! and f 

HANELY shipped the Macbook to | | in | | in February and instructed PRN to 

miRrate the emails back to C LINTON's existing server, wipe the M acbook, and return the Macbook to 

who was CLINTON's at the time 

(UZ Z F 6U0) The Macbook was shopped froml 


(U//F OUQ) When HANLEY was fi rst contacted by FBI agents in November 2015 in regards 
scheduling an in terview, she reached out to | I to ask about the whereabouts of the Macbook. 

_told HANLEY she did not recall receiving the Macbook from PRN. 
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Handling of Classified Material 


(U//FOUO) CLINTON did not have a classified DoS account, and received all classified 
information in paper form. CLINTON's Executive Assistant, JOE McMANUS, was responsible for 
determining what classified information needed to be passed up to CLINTON. The Central Intelligence 
Agency (CIA) Presidential Daily Briefer (PDB) on occasion may have also flagged information for 
CLINTON to read. When CLINTON was on travel, her traveling Executive Assistant or SULLIVAN 
would determine what classified information needed CLINTON's attention. 


(U/ /FOUO) HANLEY visited both CLINTON'S Chappaqua, NY, and Washington, DC, 
residences, however, HANLEY spent more time in CLINTON's Washington, DC, home. H ANLEY 
believed CLINTON had a Sensitive Information Compartmented Facility (SCIF) installed on | ~| 
floor of her Chappaqua home that contained at least a secure phone and fax. CLINTON also had a SCIF 
in her DC home. HANLEY believed the DC SCIF contained a secure phone and unclassified Mac 
desktop, but was not sure about a fax machine. 


(U//E QU O) When the DoS Operations Center needed to get classified material to CLINTON at 
her DC residence, the information would be couriered by her security detail in a diplomatic pouch. Only 
a few people close to CLINTON , such as HANLE Y’ could deliv er the diplomatic po uch directly to her. 


HANLEY assumed CLINTON' { 
deliver diplomatic pouches. 


in Chappaqua, 


|could also accept and 
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(LJ// FOUO ) A DoS Mobile Communications Team (MCT) traveled with CLINTON on both 
international and domestic trips. The MCT was responsible for setting up a command post for *>i per dos 
CLINTON's team. Depending on the security climate at the destination, the mobile command post would 

I by CLIN I ON or her designated stall t he MC I generally set up an unclassified 
DoS computer in either ABEDIN or HANLEY's room for the purpose of printing unclassified 
information for CLINTON. It was not uncommon for HANLEY to use her personal Gmail account to 
print from the mobile DoS unclassified terminal because even though she was using a DoS computer, the 
DoS connection was unreliable 


(U// FOU O) CLINTON had a secure phone in her office at DoS, as well as in both her 
Washington, DC, and Chappaqua, NY, residences. When CLINTON was traveling, ABEDIN would 
generally carry a secure cell phone. HANLEY carried the secure phone on occasion, and described the 
phone as looking like an old Nokia non-flip phone with a big antenna and large buttons. The secure cell 
phone was carried in a box. ABEDIN kept a secure cell phone in her desk at DoS. 

(U//F OU O) HANLEY received a lesson from somebody on the DoS technical team in regards to 
using the secure cell phone, but when HANLEY tried to use the secure cell phone in 2012 on a trip to 
Haiti, it did not work. 
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Email Review 

(U// FOUO) HANLEY was contacted by CLINTON’s attorney, DAVID KENDALL (Williams & 
Connolly), in March or April of 2015. Following her conversation with KENDALL, HANLEY searched 
the Gmail account she used while at DoS for any email communications with state.gov accounts and 
deleted emails associated with state gov accounts. HANLEY was not involved with any efforts to review 
and cull CLINTON'S emails. 

General Security Matters 

(U// FOU Q) HANLEY never personally was notified of an intrusion attempt against any of her 
email accounts (personal or Gmail), however, she remembered hearing some state email accounts were 
hacked by presumably the Chinese Government following one of CLINTON's trips to China. 

(LI/ /FQHG) HANLEY also received verbal security counseling from Diplomatic Security (DS) 
following a Russia trip on which she accompanied CLINTON. HANLEY was handed a diplomatic pouch 
containing CLINTON's briefing book on the plane upon arriving in Russia. HANLEY brought the pouch 
and its contents into the Russian hotel suite she shared with CLINTON. DS found a classified document 
from the briefing book in the suite during a sweep following CLINTON and HANLEY's departure, and 
HANLEY was later informed by DS the briefing book and document should never have been in the suite. 


(U// FOUO ) A copy of the original interview notes are attached in a 1A envelope. 
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(U// FOUO) |_[was interviewed at his office at the Harry S. Truman Building, 

2201 C Street NW, W a shington. D.C.. by Federal Bureau of Investigation (FBI) Special Agents (SA) 

_|and _ _ After being advised of the identity of the interviewing agents, 

and the nature of the interview_provided the following information: 

(U//F0W©) In February 200Q J ~| was assigned as a | | in the Department of State 

(DoS) Operational Cente r. DoS' s Operatio nal Center is manned 24 hours a day by t hree different watc h 
shifts. Sometime in 2009 J Ibecame a| | which meant thatl I 


(U// FOUO) In either March or April of 2010 
State HILLARY CLIN TON. ! 

_Before ! 

occasions for his predecessors in the rolel 


ICLINTON'sl 


JforSecretary of 


te tilled m on a tew 


Secretary of State. 


_Und_L .ast Name U nknown (LNU). 

_during her tenure as 

vere already in place when CLINTON was appointed. 


(U/ /FOU O) In his role as CLINTON's | _]was responsible for reviewing 

and filtering information intended for CLINTON | I reviewed various reports and 

information/action memos to determine which warranted forwarding to CLINTON, and would 
subsequently filter out and clean up the most relevant info rmation to forward to CLINTON via her 
Executive Secretary, JOSEPH MACMANUS. The reports l I reviewed were a “mixed bag," and 

included everything from unclassified ceremony notifications and Talking Points, to Secret and Top 
Secret intelligence briefings. 

(U//F QUO ) CLINTON did not have a computer in her office, nor any electronics_was 

aware of, so all briefing materials forwarded for CLINTON'S review in office were provided in paper 
form. | was responsible for making sure he properly organized and marked the reports he 

forwarded in regards to their classification. 
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(U/ /FOUO) There was no specific guidance as to w hat information)_were 

expected to forward up to the Secretary's attention. ) i nitially ran things by MACMANUS, but 
quickly got a sense of what information needed to be pushed up the chain. 

(U/ /FOUO ) CLINTON had an Advance Staff of twelve to fifteen people, referred to as “The 
Line,” who w ould serv e as CLINTON's Special Assistants while she was on travel. When CLINTON 

was traveling,_would communicate with “The Line” and MACMANUS via both unclassified and 

classified systems. ALICE WELLS eventually replaced MACMANUS as CLINTON's Executive 
Secretary. 

(U//F OU e j did not recall ever emailing CLINTON directly, a nd specif ically stated that it 

would have been “weird” for him to send CLINTON an email. The only time thought he may 

have emailed CLINTON directly would have been during the Royal Wedding. If l I needed to push 

information up to the Secretary via email, he would reach out to either MACMANUS or her Chief of 
Staffs, HUMA ABEDIN and JAKE SULLIVAN. 

(U//EQUO j described SULLIVAN as a “work-a-holic,” and explained he served in the 

rule as the Deputy Chief of Staff (COS) for Policy. It would not e uncommon for SULLIVAN to work 
very late at night. ABEDIN served in the role of Deputy COS for Operations, and was more concerned 
with logistics related to CLINTON'S travel. 

(U/ /rOD9 ) | | was unaware that CLINTON was working off of a personal s erver._ 

only received a few emails directly from CLINTON, which appeared from “H.’_though t it was a 

little odd because the DoS email naming conven tion was u sually last name, first name, however]_ 

did not recall checking the actual email address. | |assumed CLINTON 1 s email was regulated by 

DoS, as she had a DoS Blackberry. 

(U//EOUO)] ~]was assigned to | | from 201 2-2013, and 

recalled | [ being very specific about the process for record emails | did not 

remember receiving similar guidance c oncerning records emails at DoS Because of the banner 
information on DoS computer systems | assumed that all of his DoS emails were for the record. 

(U//FOUO)_is a user of the DoS POEMS system. |~ I recalled periodically r eceiving 

notification from the systems administrators concerning attempted hacks to the POEMS system _ 

could not recall the specifics or the timing of these notifications. 

(U/ /FOUO) Interviewing agents asked I to review an email sent from_dated 

4/10/201, and titled “Stevens Update (Important),” as publically available online in the DoS R eading 
Room. The email was addressed to SULLIVAN, ABEDIN, WELLS, and S_SpecialAssistants 
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stated he was familiar with the email and was aware that it was recently released as part of a recent 
Freedom of Information Act (FOIA) request concerning CLINTON'S emails. 


( U// FOUO ) The email in question originated as an unclassified email from the DoS Operations 
Center to l who stripped the preceding trail of emails and possibly fixed a few g rammatic al and 

spelling errors before forwarding the email on to SULLIVAN, ABEDIN, and WELLS. _[noted that 

he likely also added “(Important)” in the Subject line of the email, but did not ma ke any sub stantive 
changes to the email before forwarding it. The emai l would have initially come t d ~| from a specific 
person in the Operations Center Howeve r J khd not iccall who specifically in the Operations 

Center sent that particular email l I did nit have a record of the email he received from the 

Operations Center but stated that the Operations Center does maintain all records. MCMANUS and/or 
_would be individuals with access to the Operations Center records. 

(U//F OUe l b id not push-forward all information he received from the Operations Center. 

However, he would orally brief information more often than email._pould not recall an instance 

where he was concerned with the Operations Center upvlng classified information from the high side to 
the low side. 


(U//F 0UO ) The majority of the personnel in the Operations Center are Civil Service employees 
who receive extensive structured training before they are on their own on the “Ops Floor.” The 
Operations Center receives information from all over the Intelligence Community (IC). One person on 
each watch shift is tasked with the “watch fax,” which receives reports from all over the IC. 

(U/ /FOUO )|_|further stated that he thought the “discussion over (the aforementioned) email 

was healthy, and thinks that there is likely a problem with the way DoS gathers and uses information” 
from the IC. 
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Office of Information Programs and Serv ice s (IPS), United 


States Department of Sfate LSTATF1 Bureau of Administ ration 
20520, offic e telephon 
date of bi r th 


mobile telephone_ 

was interviewed in person by FBI Special Agents P 

n a r t • i v « 1 t t • I *“ 




ashington, D.C. 


Instat e, gov. 


nd 


it FBI Fleadquarters, 935 Pennsylvania Avenue Northwest, Washington. t).C. 205j 5. After 
Demg advised of the identities of the interviewing Agents and the nature of the interview, 
provided the following information: 


2015 : 


_began working for IPS ii j 

Initially, IPS officials were told there were 14 bankers boxes of former Secretary of State Hillary 


CLINTON's emails at CLINTON's Friendship Heights office. Later, officials were told that the boxes 
would be picked up from Williams & Connolly, LLP. On or about December 5, 201-j IPS nersonnel 
picked up only 12 bankers boxes of CLINTON's emails from Williams & Connolly 


and 
he two 


one would expect if the documents were simply printed out and then stacked into the boxes. IPS 
personnel provided copies of the documents to STATE's Bureau of Legislative Affairs, Office of the 
Legal Adviser, and the Office of Congressional and Public Affairs. 

Although, CLINTON was sworn in as Secretary of State in January 2009, IPS officials were 
unable to Incatp am of 
Connolly. 


ler emails from January-April 2009 in the documents provided by Williams & 
did not know whether CLINTON used a different email address at that time. 

A preliminary review of the documents did not occur until months later IPS had to wait on the Office of 
Legal Counsel to provide an official determination as to whether the emails would be considered official 
STATE records. At some point, the determination was made that the emails would not be considered 
official STATE records. 


Based on the dates on the boxesj_(opened the box with the Benghazi-related incidents 

first. There were sensitive Benghazi-related records, some records related to the. National Archives and 

U___ I Reco rds and 


Records Administration a nd some personal emails in that box 


performed the records appraisal. 


informed 


hhere were 


Archives 

some potential classified emails, including some from Sidney BLUMENTHAL, that appeared to have 
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other IPS officials were not sure if the boxes were consolidated or what could have happened to tr 
other boxes. The boxes were labeled with date ranges, which were accurate for the most part. Some of the 
documents were filed out of order. bpined the documents were pre-arranged differently than 
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Investigation on 08/17/2015 _at_ Washington. DC 
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been writ ten by Tyler Drumheller, former Central Intelligence Agency (CIA) Division Chief, European 
Division. I ~ "" 
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as well as other emails that discussed various information 


related to various foreign governments. 


Sometime around late January 2015^ 


gave a 


status brief about the emails to STATE 


officials Patrick KENNEDY, Under Secretary for Management. 
Bureau of Administration andl 
Services. KFNNFDY and 


documents 
KENNEDY decided to 


be 


Global Information 
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|vere each provided with two binders full of email examples of 


ieved were possibly classified, 
keep his binders following the brief 


returned her binders t 


l 


but 


was not aware of anyone in IPS or at STATE who received the rules or parameters the 
CLIN f(JIN team and/or Williams & Connolly used to segregate CLINTON's personal and official work 
emails. There were appro ximately 60,000 emails, which were reduced to about 30,000 IPS had requested 

Legal Adviser, STATE to ask Williams & Connolly for the rules they used. 
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To date, 



did not believe 


Received a response. 


STATE Inspector General, was also trying to determine how Williams & Connolly performed their 
review and what basis they used in reducing the emails. Initially, Cheryl MILLS, former CLINTON 
Counselor and Chief of Staff, was the only CLINTON staff member to respond to a formal request by 
STATE for information pertaining to personal email and devices used to conduct official STATE 
business. 
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According to 


|in February 2015, 


attorneys at STATE's Office of Congressi onal Affairs since approximately! 


n 

Jana 
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along with attorneys from the Office of Legislative Affairs, 
performed their review of the 30,000 emails, from which 296 emails were located and produced 
responsive to requests from the U S. House of Representatives Select Committee on Benghazi. The 
manual paper search was done using keywords “Libya,” “Benghazi,” and “security.” 

Prior to the formal FjOIA review by IPS of the 296 emails. Congress threatened to release the 296 


emails based o 


'l 


ea; 

bureaus and inter-agency reviewing offi cials However] 
regular interagen cy reviewers familiar to| ' 

Office of Inf ormation Man agemen t oil 


nput that her team had alre ady coordin ated with the appropriate STATE 


land her team did not work with t 
(did not include 


he 


Management Division, FBI. 
the FBI. 


believed 


[Records 
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[may have coordinated with DOJ, but not with 


In or around March and April 2015 
internally from KENNEDY and 


and IPS felt pressure by both Congress and 


to quickly approve the 296 emails for release Initially, 
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_pnd his team were told to do a “light review wit h light redactio ns.” but were later told by the 

Office of Legal Counsel to perform a regular FOIA review. [ special team of senior 

reviewers, approximately 40 full-time equivalent reviewers, worked with the appropriate Bureaus on 
possible classified information and sent the proper referrals to the United States Intelligence Community 
(US1C) partners. 

did not think_and the Office of Legislative Affairs attorneys had the 

appropriate training and experience to review, redact and produce emails responsiv e to Congre ssional 
inquiries and especially not expert enough to respond to FOIA requests. For starters ind her 

team performed their entire review, redacted what they did, and then copied the 296 emails to a .pdf file 
on an unclassified network If any information was later found to be classified, then they would have not 
only corrupted every computer that touched that classified information, but they might have contributed to 
a loss of classified data. IPS always pushed their material to the S1PR.NET network and used their “F2” 
en clave to pe rform their FOIA review before disseminating their products. Also, the 296 emails provided 
by|_[via pdf included redactions done for CLINTON'S privacy but unrelated to national security. 

believed there was interference with the formal FOIA review process. Specifically, 
STATE'S Near East Affairs Bureau upgrade d several of CL INTON's emails to a classified level with a 

B(l) release exemption,_dong with |attorney. Office of Legal Counsel called 

STATE'S Near East Affairs Bureau and told mem tney could use a B(5) exemption on an upgraded email 
to protect it instead of the B( I) exemption. However, the use of the B(5) exemption, which is usually 
used for executive privilege-related information, was incorrect as the information actually was classified 
and related to national security, which would be a B(l) exemption. 


intormation services, 1 -,_ ~ 

Department of Justice (DOJ), and]_[DOJ, that she had coordinated the 

review of the 296 emails with the appropriate STATE bureaus and inter-agencies. The emails “were 
already re viewed and there was nothing classified in them, so the FOIA review should go quickly.” 
was unsure why the FOIA review was taking so long. 

-1 again stresse d review and coordination were done with people unfamiliar 

to and w ere not the no rmal point s of contact that IPS used for other agencies. More 

importantly, although | [and [thought their quick initial review showed none of the 296 

emails were sensitiv e fhllowinh t he nrtnal FOI A review, one document had been upgraded to classified 

based on input from]_pnd_[There were other documents IPS recommended for 

upgrade, including one specifically related to the Department of Defense's United States Central 
Command (CENTCOM), and others that were still in the referral stage, including emails that have FBI 
and CIA equities involved that originated from BLUMENTHAL. 
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id not know why he and IPS were not part of the initial nn»rp<-;innHl rpwipw for the 


and 


296 Benghazi-related emails, like they had been for past Congressional inquiries. | |was c ut out 

of the loop for the m aterials ini tiall y sent to Congress and had no idea what kind of review and 

seemed to have been placed in their specific positions by top 


her team performed. 

STATE officials; they appeared to have a very narrow focus on all CLINTON-related items, and were put 
in positions that were not advertised 

In early May 2015, KENNEDY called an interagency meeting regarding the scheduled release of 
all the CLINTON-related emails by the Janua ry 15, 2016 dea dline and asked for quick turnarounds on any 

future requests. People in attendance includeq_Jrepresentatives from White House Counsel, 

CIA, FBI, Office of the Secretary of Defense (OSD), Director of National Intelligence (DNI) and the 
National Security Council (NSC). 


Imme diately following that meeting . KENNEDY held a closed-door meeting withl 


pointedly askec 


DOJ's Office of Information Programs where KENNEDY 


to change the FBI's classification determination regarding one of CLINTON's 


emails, which the FBI considered classified. The email was related to FBI counter-terrorism operations. 


KENNEDY called 


pi recti y on one occasion. The purpose of that call was to ask 


questions regarding pressure from the Office of the Inspector General of the Intelligence 


Community (ICIG) to complete the review of the approximately 30,000 emails. Specifically, KENNEDY 
wanted to know if there was precedent to have outside reviewers help STATE with the FOIA process. At 


that time 

STATE regarding the FOIA review process 


Kvas unaware of STA TE IG's and ICIG's Ju ne 19, 2015 j oint recomme ndation to 


£ 


ICIG, offered 


and IPS extra 


reviewers from the intelligence community to help review the 30,000 emails. However, many of those 
reviewing officials arrived untrained to formally review items. After the initial training, those reviewers 
became instrumental to the review process. 


with the 296 Benghazi-related emails. 


had not felt as muc h pressure regarding the review and release of the 30,000 emails as 


Instead of pressure, it felt more like curiosity as to the raw numbers of emails 
already reviewed, upgraded from unclassified to classified, referred to outside agencies, and/or released 
publicly. To date, approximately 1,600 referrals were made to USIC partners. Many of those emails 
discussed foreign governments and their leaders along with various sensitive telephone calls. Other 
emails existed that would later be referred to the USIC. Those emails included emails from STATE 
personnel discussing information lost as a result of the “Wikileaks” scandal. 
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Some material from the 30,000 emails, though unmarked as such, were definitely classified back 
in 2009-2012 and still remained classified. On the other hand, it was true some material (in general, not 
specific to the 30,000 emails) could have been previously classified, but were later downgraded. An 
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example would be CLINTON's travel schedule or security-related information based on specific times 
and places. It was a very large security concern for IPS when they heard some STATE employees 
assumed all documents on unclassified system were unclassified, based on being on an unclassified 
system and having no portion markings. 

One email that was u ngraded from the 30.000 ema ils was an email exchange between CLINTON 
ant ] former ~| vh prp hntVi individuals used their personal email 

addresses to discuss matters related to Russia Despite this, I_responded to KENNEDY's request 

for all STATE-related personal emails with a letter that statec ZZJ ad no STATE-related emails in 
his personal email account. 


STATE was normally able to complete classification upgrades very quickly. The upgrade would 
happen after STATE bureaus and other agencies determined, 1) how the information was obtained; (2) 
what the information was; (3) based on current global events/situations, or (4) because the information 
was, initially, improperly marked as unclassified. 

_heard the argument that some of CLINTON's emails were unclassified back in the 

2009-2012 timeframe when they were initiated, but were later classified due to various circumstan ces. It 

watL-Y.ei\tiar£.foL.s.oiiietIiin 2 .-thaL.\\tasactiia,llv unclassified to become classified years after the fact._ 

_(National Archives would be a good point of 

contact for knowledge on the upgrading process in general. 

- nn ^ about August 10, 2015, from Office of the Secretary of Defense (OSD) called 

_and told her CENTCOM records showed approximately 1,000 work-related emails between 

CLINTON's personal email and General David PETRAEUS, former Commander of CENTCOM and 
former Director of the CIA. Most of those 1,000 emails were not believed to be included in the 30,000 
emails that IPS was reviewing. Out of the 30,000 emails, IPS only had a few emails from or related to 
PETRAEUS, as well as a few related to Leon PANETTA, former Secretary of Defense. There were a lot 
of emails to/from Denis MCDONOUGH, former Deputy National Security Advisor and current White 
House Chief of Staff. 


_pescribed Jacob SULLIVAN and Cheryl MILLS as “gatekeepers” for sending 

CLINTON e mails/material; they would filter or re view most ite ms that CLINTON would receive. 

recommended the FBI talk to his boss specifically about individuals at STATE 

who h olcfawe ekly meeting about Congressional records production and the FOIA process as well as 

wherel —_[felt pressure came from regarding u pgrading an y of the 296 Benghazi-related emails. 

_recommended the FBI should talk with regarding the alleged 1,000 emails between 

CLINTON and PETREAUS. - 
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On June 23, 2 016, MONICA H A NLEY was interviewed fry Federal Bureau of 

]and 


at 


interview, were 


3- I I J I 

Wash ing ton. DC 20001 Representing HANLEY, and also present for the 


_jand[ 
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After being advised of the identities of the 


interviewing agents, and the purpose of the interview, HANLEY provided the following information: 


(U/ /FOU O) HANLEY created an archive of HILLARY R. CLINTON 1 s hdr22@clintoneniail.coin 
emails in March 2013 as a result of concerns related to a reported hack of SIDNEY BLUMENTHAL's 
email account. HANLEY recalled participating in a conference call with HU MA ABEDIN and JUS TIN 

COOPER following the hack to discuss changing CLINTON's email address. _may 

have also participated in the call. While the group ultimately decided together to change CLINTON's 
account, ABEDIN selected the new name of the email account, hrod 1 7@ciintonemal i com . 

(LJ/ /FOB O) COOPER set up the email account and assisted HANLEY with the technical details 
concerning creating a backup of hdr22@clintonemai 1 .corn . COOPER provided HA NLEY an Apple Mac 
laptop from the Clinton Foundation, which HANLEY took home to her apartment in i 
HANLEY remotely signed on to CLINTON'S email server from her apartment, as COOPER 
telephonically walked her through the steps to transfer the emails from the server to the laptop and a 
thumb drive. HANLEY used MacMail, a built in application on the laptop, to transfer the emails. 
HANLEY initiated the process, and left the computer running, as the entire transfer process took a few 
days. 
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(U//E QUO) CLINTON's email address was changed from hdr22@clintoneniaii.com to 
hrod 17@clintonernaii.com before the archive was created. 

(U//FOUO) While HANLEY could not recall the specific model of the aforementioned Apple 
laptop provided by COOPER, she did recall the model was not an “Air,” but was likely a “Pro” because it 
had an ethernet port and a thumb drive portal. HANLEY further provided that the laptop she received 
from COOPER was silver in color and seemed like a newer model. The thumb drive HANLEY used was 
something she happened to have laying around the house. She could not recall any details concerning the 
brand or appearance of the thumb drive. 


Investigation on 6/23/2016 
File # 


at 


Washington. D C 
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and its contents arc not to be distributed outside your agency. 
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(U// FQUO ) Although it never actually happened the way it was intended, the initial purpose for 
creating two backups of hdr22@ciintonemail.com (one on the laptop and the other on the thumb drive) 
was so a backup was available at both CLIN TON'S New York and Washington, DC, reside nces. The 
laptop remained at HANL EY's apartment ini I until she 

transitioned to a job in the | | in early 2014. HANLEY thought the laptop was 

stored in a drawer or on the desk in her bedroom. HANLEY did not use the laptop after the transfer of 
emails, nor did she have knowledge of anybody else accessing the laptop. The laptop was also password 
protected, so it would be impossible for anybody to access the laptop without HANLEY's assistance. 
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(U// FOUO ) HANLEY could not recall whatever came of the thumb drive she created, and 
searched her apartment multiple times in attempts to l ocate it. HANLEY thought she might have given 


the thumb drive to ABEDIN when she transitioned to 


as she provided ABEDIN with 


several items upon departure. However, HANLEY did not specifically recall providing ABEDIN with 
said thumb drive. 
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(U// FOUO ) After the emails were transferred from hd r22@ciinton e m all com to the laptop and 
thumb drive, the intention was to delete the emails off the CLINTON email server. HANLEY would not 
have been involved with deleting emails, and assessed COOPER would have been responsible for 
deleting anything directly from the server. 

(U/ /POUO ) In 2014, after she was no longer working for CLINTON, HANLEY realized she still 
had possession of the Macbook containing CLINTON's archived emails. HANLEY subsequently 
contacted Platte River Networks (PRN) o n her own acco rd and spoke witl£ ’ 


HANLEY ini iallv tried to remotely send|_ 

provided HANLEY via email: 


the archive via the following application, which 


https:/7brok&r.gotoassist com/h/citrixa5sist‘ ? Ouest:on ::: DR051-438-?52 . HANLEY initially attempted to 
transfer the archive to | I remotely from CLINTON's New York residence via the 

aforementioned website, however it did not work. HANLEY subsequently a ttempted to send the archive 


remotely from her own residence, and was also unsuccessful. HA NLEY and 
decided HANLEY would ship the lapto p containing the archive to j 

the archive to CLINTON's PRN server. | I was then going to wipe the laptop and return it to 


laptop t(£ 


_^ultimately 

Jand he would transfer 


who was CLINTON’ 


at the time. HANLEY shipped the 


Jas they discussed, but was not aware of what happened to the laptop thereafter. 
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(U// EOH O) CLINTON did not know her email login inform 
change the information in CLINTON's BlackBerry when necessai 
automatically populate. When CLINTON's password required ch 
password, update CLINTON's BlackBerry with the change, and n 
PAGLIANO. HANLEY had CLINTON’s email logon informatiol 
CLINTON'S email if needed. On occasion, CLINTON would askj 
CLINTON was unable to pull up on her BlackBerry. In order to r« 



)d generally 
ould 

Ichoose a new 
and BRYAN 
■uld check 
old email that 
‘ * LEY would 
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open up CLINTON's email account remotely from a computer and print the document for CLINTON 
HANLEY assumed ABEDIN also accessed CLINTON'S email account on occasion. 


(U/ / E OUO ) HANLEY often purchased replacement BlackBerry devices for CLINTON when she 
was Secretary of State. CLINTON preferred BlackBerry devices that contained a roller-ball rather than 
the more modern touch pad. HANLEY recalled purchasing most of CLINTON's replacement BlackBerry 
devices from a Washington, DC, AT&T Store in DuPont Circle HANLEY also recalled purchasing one 
BlackBerry from an AT&T store in the Pentagon City Mall in Arlington, VA. HANLEY also recalled 
purchasing a replacement BlackBerry for CLINTON from either Ebay or Amazon, but stated this took 
place after CLINTON's tenure at the Department of State. 

(U/ / F QUO ) HANLEY had little insight into the writing process of CLINTON's book/memoir. 

She recalled CLINTON meeting with the writers regularly for multi hour meetings, where she assumed 
CLINTON would share topics and anecdotes she wanted to cover in the book. HANLEY also printed out 
chapters of the memoir as it was being written so CLINTON could make edits. HANLEY had no 
knowledge of the writers having access to CLINTON's emails. 


(U//FOtlO) At the conclusio of the intervie w. HANLEY agreed to provide interviewing agents 
copies of emails she exchanged with_ 
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(U/ /FOUO ) A copy of the original interview notes are attached in a 1A envelope. 
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iU/Wtt! On February 27, 2016. JACOB SULLIVAN. DOB I 
Tviewed by Federal Bureau of Investigation {FBI) Special Agents <SA)[ 


[w the FBI Washington Field Office. 601 4* Street NW. Washington DC. Present 
tor she interview were SULLIVAN'S attorneys Beth Wilkinson anti Alexandra M. Walsh, from Wilkinson. 
Walsh & 1-skovit/ I I P Also present wa s FBI Section C hief Peter P. Strzok. as well as David Uufman. 

I * land| | from the Department of Justice (DOJ). Prior to 

the interview. Wilkinson and Walsh agreed to sign a non-disclosure agreement in anticipation of viewing 
documents during the interview that were classified as part of a Special Access Program (SAP). After 
being advised of the identities of the interviewing agents, and the purpose of the interview, SULLIVAN 
provided the following information: 

ilw rOU O) SULLIVAN was recruited bv l I to be an advisor for HILLARY CLINTON 

during her 20UR presidential campaign. When CLINTON became the Secretary of State in 2009. 
SULLIVAN became a Deputy Director of Policy Planning at die Department of S tate (DOS). In and 
around February 201 i. l I SUI.UV AN became 

Chief of SUIT and Director ofPoticy Planning at DOS. In this role. SULLIVAN managed and supervised 


approximately 30 people and his specific duties, and that ol most senior officials at DOS. were prescribed 
byCUNTON. Under her tenure. SULLIVAN traveled with CLINTON on almost every business trip she 
u «,k and acted as a conduit to the National Security Council (NSC). SULLIVAN produced policy papers 


l and ! I . SULLIVAN would also email CLINTON directly related to a variety 

of topics. These communications included emails written by SULLIVAN, as well as emails SULI..I V AN 
wt.ti.tkl forward to CLINTON based on hi* judgement as to their relevance. SULLIVAN also participated 
in Principal's Committee (PC) meetings with CLINTON in the Situation Room. 

< U/Zl -'OUO) livery morning throughout her tenure as Secretary of State. CLIN I ON would head an 
g:43am meeting wish her deput ies to discuss a broad range of topics related to policy iormuUnion, these 
di*iMuii*c St It .1 iVANJ ll WILLIAM BURNS, and 


deputies included SULLIVANJ_ \\ _I wu.liasvj m i 

CLINTON'S legal advisor and Chief of Stall. Cl IERYL. MILLS. SULLIVAN described MILLS as & 
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traditional Chiefuf Stall'and a "hands-onmanager' who "empowered" people. SULLIVAN believed 
Mll.I.S was involved in all ‘‘eonsequetniaT decisions made by CLIN TON. SULLIVAN described 
H( ::\4A ABLD1N as CLINTON* Deputy Chief of Staff for Operations. In this role. ABLDfN handled day 
•to-day operations to include scheduling and trip planning for CLINTON. SULLIVAN described 
ABl-IMN as a close confidant of CLINTON and as someone who had a "trusted relationship" with 
('UNION. 


(U/ /TOUO ) SULLIVAN had two computer systems in his office on the T floor at DOS 
Headquarters (fiQ): one on the Secure Internet Protocol Router Network (SlPRnctl. authorized to handle 
classi tied information up to the Secret level and one on an unclassified network. SULLIVAN had an 
official DOS email account «n both of the foregoing networks. Due to size restrictions on SUU.I VAN's 
email accounts, he often had to "archive" emails to create space in his email account. SULLIVAN 
recalled archiving email in "'big chunks" but otherwise, could not recall any methodology or science he 
applied when archiving email, it was SULLIVAN'S practice to use his suite.gov email account for all 



it was 


fas sometimes difficult to log-in to his stale.gov email account from his residence on the weekends ami 



notification that Chinese actors were targeting the email accounts of DOS employees. SULLIVAN did 



DOS. SULLIVAN understood the DOS "upelass" process as an unclassified document that at some point, 
or when combined with other documents, would become classified. SULLIVAN could not provide an 
example to this efleet. 


(U/ fl ' OUO i SULLIVAN had secure telephone equipment in his office on the seventh floor at the 
DOS. SUU.i VAN was issued a BiaekBerrv mobile device by the DOS and did not recall receiving an 
upgraded handset during his tenure. SULLIVAN could not recall being issued a secure mobile phone by 
the DOS. SULLIVAN recalled being issued a secure mobile phone by the White House for a weekend, 
but could not recall anything further about this dev ice or bis use of it. 


t When traveling overseas for his work at the DOS. SULLIVAN recalled being briefed on 
information security pertaining to the threat in certain countries, for instance. SULLIVAN recalled an 
unclassified briefing at Joint Base Andrews where the Diplomatic Security Service (DSSi warned of a 
n-w-S ,>f physical and electronic survciiltUKC it) Bcyausc fif this threat. SULLIVAN 


recalled 


> 


SULLIVAN also 


SK 
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] Since SULLi VAN 


traveled will) secure DOS communication systems while traveling overseas. SULLIVAN would make a 
secure call, conduct a secure video teleconference, or use the secure computers pa aakli or, lll£ bkiiN fi> . 
conversation needed to lake place at the classified level. SULLIV AN recalled (Skj_ -1 

l fil ft V (t ' A \ t 1. . i . 


\ SULLIVAN had no memory of abnormal 
ic devices while traveling overseas. SULLIVAN 


security screening or unusual functionality of his electron 
did not conduct foreign travel lor personal reasons while at the DOS. 

(U// TOUO) SULLIVAN recalled CLINTON had a Secure lompartmented Information facility 
(SOL) in her residence in Washington DC with secure phone and fax equipment. CLINTON also 
received information at her DO residence via courier. SULLIVAN could not recall it Cl .IN! ON had a 
51 PR net computer terminal in her residence. SULLIVAN would primarily transmit or communicate 
eiassilied information to CLINTON at her DC residence through a secure call. SULLI VAN could not 
recall if CLINTON used a secure mobile phone. SULLIVAN was not familiar with the infrastructure it) 
CLINTON'S home in Chappaqua, but assumed it had the same capabilities as her DC residence. 
SULLIVAN did not know if CLINTON had staff at her residences that also held security clearances. 

iU/' TOUO ) SULLIVAN recalled CLINTON had an “enormous" amount of information, to 
include classified information, briefed to her in-person or provided to her through paper How. CUN TON 
would routinely digest the Presidential Daily Brief (PDB) in paper form and conduct policy meetings 
daily. SULLIVAN recalled little to no classified information passed to CLINTON electronically. In most 
instances, if information needed to tv sent to CLIN 1 ON, it was routine that a senior IdSU in the DOS 
Operation Center on the 7* floor of DOS I IQ would facilitate the transmission, if CLINTON needed to be 
present to receive the information, as in the case of a secure call or fax, coordination would be done 
through CLINTON'S assistants. 

UT VrOU O ) SULLIVAN recalled CLINTON used a personal email address when she worked in 
the Senate and while she was at the DOS. but was unaware email was hosted on a private email server m 
her residence until it became public knowledge in March 2015. Moreover. SUl L1VAN knew JUS I IN 
OOOPfiR and BRYAN PAOLIANO, but never had a conversation with them regarding any private email 
server. SI f LI. (VAN had no memory of a conversation regarding federal records retention or FOIA 
implications as it related to the use of private email. SULLIVAN knew the general guidelines at the DOS 
related to federal records retention. For example. SULLIVAN knew not to delete email from his DOS 
email accounts. Upon leaving DOS. SULLIVAN boxed up his official DOS paper record* and turned 
them over to the DOS. SULLIVAN recalled the DOS handled the preservation of his email records from 
nos servers SUM.I VAN recalled one brief conversation in the summer of 2014 with MILLS and 
. | pertaining to the production of federal records, but could not recall more detail. 


bl 


(Ufl FOl *0 ) The email address SULLIVAN recalled CLINTON using was 
hdr;? v■f/.-dinioneinaiUmw. SUL! .IVAN also recalled that 1IUMA ABLDiN had a •yfdinkmemml address. 
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Mu could m>i remember it specifically. SULLIVAN was never asked to have a (kclimonemaii address and 
never requested that one be issued to him. SULLIVAN was unaware of any back-ups, migration, deletion 
or wining of entail from the clmtonemaii.com domain. SULLIVAN recalled a conversation with 
I jhATiiLR SAMULLSON in the tall of 2014 where SAMUliLSON told SULLIVAN he may need to 
look through documents to see if they constitute a federal record, but this process never occurred. 

{l |/ /rOl K ft I Jpon initiation of his employment at DOS. SULLIV AN received a 1 OP SIsC RLI 
jTS) Sensitive Compartmemcd Information (SCI.) security clearance, in order to receive the foregoing 
clearance. SULLIVAN recalled an orientation and briefing where handling, transporting, and 
disseminating classified information was discussed. As far as he understood, SULLIVAN had derivative 
classification authority and could classify information based on the guidance of a classification manual. 
Other than CLINTON. SULLIVAN was unaware of anyone at DOS Unit had Original Classification 
Aulhoritv (<)CA). As part of his job. SULLIVAN was briefed into a large number of SAP and covert 
action programs. The process of being briefed into a SAP required an individual from the DOS Bureau ol 
intelligence and Research (INK! to brief the program and ensure the requisite terms were signed and 
maintained. SULLIVAN did not recall ever handling SAP material on a IS computer system, but was 
aware INR had TS computer systems. 



(U// TOU 0) SULLIVAN stated a PC meeting would be initiated by the NSC eltttir and would 
roci uiiv the staff of the government agencies invited to prepare a package regarding whatever topic the 
NSC would prescribe. As a Standard Operating Procedure (SOP), a PC would initiate a Deputy s 
Commi’tee (DO meeting where certain subject matter experts in each agency would deliberate on their 
agenev’s conclusion pertaining to the prescribed topic. For the DOS. dm bure au s ihf t c overed the topic ot 

the PC meeting would author packages and then funnel them threugh | l aiK L-J y .... 

CLINTON for use in the PC meeting. SULLIVAN would sometimes be involved in IX meetings 1 1 his 
bureau had a stake in the issue. In that instance. SULLIVAN would author sections ol written packages 


CLINTON and the respective Deputy that attendees a 
•occasionaliv" and could not recall a precise amount. 
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(U- ^ei fr i t After reviewing an email dated June 17, 2(H ! with subject line "Plan for PC 
tomorrow," SUI.UVAN stated he did not remember the email specifically. Sid LI VAN stated he had 
already viewed this email when released by the DOS through a Freedom of Information Act <F0IA> 
request. SULLIVAN did not recall the specific email or what the PC meeting was about. SULLI VAN 
understood “'nonpaper" to mean an unclassified document without official markings given to a foreign 
government that states the unofficial position of the US government. SULLIVAN understood "nonpaper" 
\o mean this because he had created a "nonpaper" document lor CLINTON before, in the context o! the 
displayed email and while reading it in the moment. SULLIVAN thought CUN f ON would have wanted 
hint to make an unclassified version of the document, summarize the contents, and then send it to her on a 
nonsccurc fax. SULLIVAN staled that CLINTON took the protection of classified information very 
seriously. 


{S/!*NH After reviewing an email dated October 13. 2012, with st jhlCCt ll Ui' “I u ; 1 his am tire m 
on Blue." SULLIVAN stated he did not remember the email specifically!_ 


IsULUVAN knows 


Hand first met hint whiteL- 


1 SUI.UVAN 

worked as colleagues with 

|when|_ 

_Jwas at tire Pentagon and CIA. 



(t ;/ /rout) ) After reviewing an email dated April 10.201!. with subject line Tw: Stevens l Update 
i Important)." SUN IVAN stated he did not remember the email specifically SULLIVAN did not think 
the email was unusual and wasn't surprised AFR1COM information would be cited in an unclassified 
email. Kill LI VAN would rcauluriv review situation reports from around the world in unclassified email. 

I ‘ “I « 1 t * »\__...t.vn 


SULLIVAN knew 
SULLIVAN staled 


as a career FSO that worked in the DOS Operation Center. 


had no reason to question | 


would regularly share events from around the world in unclassified email and 
judgement regarding the proper handling ol classified information. 


Alter reviewing an email dated December 27 
subject‘line "PW: (SBU)." SULLIVAN slated he did not remember the email specifically 


2011. with 
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pULUVAN had no reason to believe any DOS 
employees he worked wall ever intentionally mishandled classified info) DMiori and vlu i- fov 
eoriid to make a sound judgement when handling classified information^ 
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tU/ TOUO ) After reviewing an email dated July 4.2009, with subject line "Fw: Follow Up: 
Summary of 1055 f-DT Dl’KK Conference Call.” SULLIVA N stated he did not remember the email 


specifically. SULL IVAN did not specifically recall th e name 


SULLIVAN 


] and knew her to be a senior Watch Officer in the 


did recall the name_ 

DOS Operation Center. When asked about the content of the email and if he believed the pending military 
activities of a foreign military 1 was classified, SULLIVAN replied the person at 1X>S who sent the email 
must have had reason to believe it could be sent on an unclassified system. SULLIVAN stated every one 
he worked with at DOS worked hard while under pres sure and used the best judgement they could to 
accomplish the mission. SI H..I IVAN was unsure why I 1 forwarded this particular email to his 
gmai! account, hut recalled being in I daho arou nd this time for a bachelor party. SULLIVAN stated that 
procedure was not routine practice foi j | and could not recall another instance where it occurred. 


(U/ /t ' X)U O* After reviewing an email dated April 27. 2012. with subject line "fw: Day 2” 
SUM.! VAN staled he did not remember the email specifically. St !H,IVAN knew the "1A process to 
mean intenmenev p rocess. SULLIVAN recalled the general subject matter ol the email and remembers 
*1 try inn to open the Ground Lines Of Communication (GLOC } between countries alter 


attacks involving the International Security Assistance Force 0$AF). 

(S/[ After reviewing an email dated August 25. 2010, with subject line “l w: N\ 

Times article on SaidviT si n l ivaN sian-d he did not remem her the ema il srari i imllY SULL I VAN d i d 
not recall th e name SAL! Jill 




time 


was the 


and had the abtlUv to email CLINTON directly, as well as forward email to 


SULLIVAN. 


line "fw: u s drone s trike kills 4 milil 


sneci Ikalivj 


_Alter reviewing an email dated July 6, 2012. with subject 

ii.-mts in IGkisu m." SULLIVAN stated he did no! remember the email 


r 


After reviewing an email dated February 25, 2012. with 
suhicei line 'Tw: Alert," SULLIVAN stated he did nut r emember the email specifically, but recalled 


ivi'i» this redacted email in a F()(A release by the DOSJ 



b6 

b7C 


bl 

b3 


bl 

b3 


bl 

b3 



bl 

b3 


b6 

b7C 




bl 

b3 






>- lifts (iU'V f!M>-9S) 


-w s 




inSi’fVitfvv ,i;lkv SnllUan 


Ua <nni'2t>U * ■ Pase 


kfter reviewing an email dated]_|wiih subject 

(inj >U1 .U y.AN stated he did not re member the 

email specifically. SULLIVAN slated that, based on the subject line.]__Lm^ 

reporting in a manner he believed to be sensitive but unclassified. SULLIVAN statedl_pay 

have sent this email on an unclassified system because the drone strike could have already hit (he news 
wire. SULLIV AN did not b elieve reporting on a drone strike after the fact made it less sensitive, but was 

speculating <»•( i indnerntn i. SULLIVAN believed_reference to a secure call in 

the email demonstrated attempt to delineate between what could go in unclassified and 

classified channels. Additionally, SULLIVAN stated this email was not out of step with how people 
approached similar matters at the time. Nothing stood out to SULLIVAN at the time as mishandling 
classified information. 

(U/. TOUO ) Alter reviewing an email dated May 16. 2011. with subject line “Re: Senator Kerry 
has requested to speak with Secretary Clinton,” SULLIVAN stated he had a general recollection of the 
event discussed i n the email, b ut did not recall the email specifically. SULLIVAN did not recall the 
conversation with_referenced in the email. 

— After reviewing an email dated August 24. 20!! . with subject lino " Re: Rasmussen 

call." St U t IV AN stun d he did not remember the email specifically. SULLIVAN stated he usually found 
out about! (trough open source reports, DOS email reflecting news accounts and more rarely, 

through someone m the DOS 1 IQ building. 

_ _ _ After reviewing an email dated]___pith 

subjectUn T i >l-UJVAN stated he did not remember the email specifically. 

si it I IVAN viaii'ii the email was “tinusuai" find Ik could not determine what he was referring to by the 

_put he was not sure. 

1 [ After reviewing an email dated_with subject 

tin ,] Is uLi.IVAN stated he did not remember the email specifically SI LUVAN stated the 

call wit ri regarding the nomina tion of a second strike was with | SULLIVAN stated he 

infrequently communicated witl j and. when he did, it was through a mix of secure calls, 

unclassified calls and unclassified cmai s. 


Utter reviewing an email dated 


I with subit 


find SULLIVAN stated he did no t remember the email specifically. SULLIVAN did no! 

recall how he comm unseated with ! l and guessed it was not by phone and most likely. 

<i it i IV AN .-in an d pasted from another unclassified email. SULLIVAN did not recall speaking with 

generally. While working at the DOS, SUL1.IV.AN staled he can’t recall one time he fell 
uneasy about something he read in an unclassified email. SULLIVAN could not recall an instance where 
anvone expressed a concern with the type of information coming over the unclassified email system or 
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with handling classified information in general. Si JLLJV AN slated CLIN I ON never expressed a concern 
about the handling of classified information. While al the DOS. SULLIVAN felt his colleagues 
judgement was good and that they had a good understanding of how to handle classified information. 
Generally, while at the DOS. SULLIVAN stated he had to pay attention to what information goes on what 
channel. For instance, he would convey what he could on an unclassified system and then go to 
equipment authorized to handle classified communications to convey more information. 

sU d'Ot ?Ot After reviewing an email dated October 4, 2009. with subject line "FW: Cover 
memo." SU 1.11 VAN's attorney. BH Hi WILKINSON, asked for the classification of the email. Alter 
being advised the email was pending classification review and to treat the email as classified, 
WILKINSON stated her diem would not answer questions related to the foregoing email, or any 
documents related to the email. 


t L CfOUt -H SULLIVAN stated SYDNEY BLl'MLNTfLAL was someone CLIN TON knew from 
years hack and was someone who “liked to help the cause." A.s SI .MX! VAN understood it. 

BI.UMLN 1T1.AL had a variety of sources of information. SULLIV AN was unaware of the identities of 
site sources used by BLUMENTHAL. SULLIVAN recalled BLUMf-N'WAL would sometimes refer to 
information he gathered from former intelligence officers, but SULLIVAN understood those people to be 
retired with no access to classified information. SULLIVAN would occasionally talk to BLUMLNI UAL 


through phone conversations and maybe through email, in those conversations. BLUMLN 1 HAL would 
relay information about "big picture” topics BLUMBNTi lAf. thought were relevant and SULLIVAN 
would pass it on to CLINTON or DOS stakeholders to have them validate the information. SULLIVAN 
never heard of a concern that BLUMF.NT1 IAL had access to, or was relaying, classified information. 


t U/ /FOUO) The original notes of the interview, signed aforementioned non-disclosure 
aureemcnls. and documents displayed to St 1.1.IVAN will be inairuained in a M.)-.>40 envelope and tiled 
with the captioned investigation. 
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(U//FOUO) PATRICK FRANCIS KENNEDY, Under Secretary of State for Management, was 
interviewed at his office at Department of State (DoS), Harry S. Truman Buildin g, 2201 C Street N W, 
Washington. D.C .. by Federal Bureau of Investigation (FBI) Special Agents (SA) | 


k nd 

Also present for the interview was FBI National Security Law Branch (NSLB) Attorney 

After being advised of the identity of the interviewing 


md Senior DoS Counsel 


agents, and the nature of the interview, KENNEDY provided the following information: 
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(U/ /F0U6 ) KENNEDY was aware Secretary of State HILLARY CLINTON used a personal 
email account during her tenure as Secretary, but was unaware that she was using a personal server. 
KENNEDY received an unclassified email from CLINTON approximately once a month and noted those 
emails came from a clintonemail.com address. 


(LI//F QUQ ) The DoS “GO” system allows for DoS employees to remotely access their DoS 
account from a non-DoS server. DoS policy does not support the routine use of private email accounts for 
for DoS business. However it was understood that exceptions could be made in emergency situations, and 
in doing so, the employee should carbon copy their DoS email account for matters of record. 

(U// FOUO ) KENNEDY mostly received emails from CLINTON after hours, and so infrequently 
he was not aware of the volume of which she was using her personal account. KENNEDY was not aware 
CLINTON was solely using a personal email account for communicating unclassified DoS business. 

(U// FQUO ) DoS policy does not support the use of private email servers for continued personal 
use, nor the use of personal servers for DoS business, thus there is no approval process for their use. DoS 
policy remains the same for the use of both personal emails and servers today as it was during 
CLINTON'S tenure. 


(U//FOU0) KENNEDY recalled news stories implying a former DoS employee, BRYAN 
PAGLIANO, set up CLINTON 1 s private email and server “on the si4e 4 ’ vyhjle working fdr DoS. 

However, KENNEDY noted he was not aware of PAGLIANO's invo'veqieni until it hit tku press. DoS is 
refraining from direct inquiries into PAGLIANO's involvement urttil the FBI cerr.pldte t its investigation. 
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(U// FOUO ) KENNEDY had no direct knowledge of any of CLINTON's predecessors [COLIN 
POWELL and CONDOLEEZZA RICE] using private email accounts, but noted he was aware POWELL 
publically mentioned he used a private email account during his tenure as Secretary of State in his most 
recent publication. 

(U// FOUQ ) DoS has the responsibility of interfacing with foreign diplomats and political 
representatives within the United States and overseas to help develop policy. Sometimes information 
from these dignitaries is given in confidence and sometimes it is not. The classification of such 
information is specific to the situation. KENNEDY explained that information given in confidence may 
be initially transmitted as unclassified to report the information, but later “up-classified” when it is further 
assessed the disclosure of such information might damage national security or diplomatic relationships. 
Ultimately, the originator of a document or email is responsible for classifying the document. 

(U//F QU O) KENNEDY explained the Intelligence Community (IC) “steals” information, and thus 
has to classify said information to protect sources and methods. DoS may get the same information 
through diplomatic channels and not classify that information because it was not received from a sensitive 
source or a method. According to KENNEDY, the classification of a DoS document depends on the 
content of the message and if it is important for the other party not to disclose the information. 

(U// P0U 6) If a DoS employee wanted to use classified information derived from IC sources in an 
unclassified channel, they would need to submit a tearline request to do so. DoS cannot declassify a 
document that was not originally classified by a DoS classification authority. 

(U// P0U 6) The Secretary of State is a declassification authority, as are the Secretary's Chief of 
Staff and Deputy Chief of Staff. KENNEDY believed CHERYL MILLS, JAKE SULLIVAN, and 
possibly HUMA ABEDIN would have been classification authorities during CLINTON's tenure at DoS. 

(U//E0U0) KENNEDY acknowledged DoS received their first request to produce emails related 
to CLINTON's email sometime in 2014. The request was related to a Congressional inquiry concerning 
documents related to the 2012 attack of the United States consulate in Benghazi. The initial request was 
focused on specific emails, but was later expanded to include a broader production. 


KENNEDY was not part of the initial dialogue with CLINTON concerning the 
aforementioned request for emails. KENNEDY was only involved with interacting with Congress 
concerning the status of the request, but was not involved in the process of deciding what was and was not 
released in response. The DoS Freedom of Information Act (FOIA) team directly handled the request by 
reaching out to the appropriate Bureau or Secretariat who maintained the information concerning 
Benghazi. The Bureau of Near East Affairs would have been contacted by FOIA in reuards to g eneral 


Benghazi information. 


The DoS 


b6 

b7C 



FD-3()2a (Rev. 10-6-95) 


Continuation of FD-302 of_ Interview of Patrick F Kennedy _. On 12/21/2015 . Page _ 3 


FOIA team would have reached out to the records staff in the Executive Secretariat for specific 
CLINTON communications concerning Benghazi. 


n j//Fe^6) DoS FOIA inquiries are handled bv the Bureau of Admin istration/ Global Information 


Services]_ The DoS Bureau involves a 

team of supervisors, processors and reviewers, almost all of which are retired foreign or civil service. The 
supervisors assign the requests to processors who load the information into their FOIA management 
system and send out requests to all the Bureaus who have a relevant relation to the request. The review 
team collects the information received from the relevant Bureaus and determines what if any exemptions 
should be considered and/or applied. The FOIA review team also determines if the information 
responsive to the request contains any outside agency equities, and appropriately coordinates with those 
agencies to respond to the request. Furthermore, the FOIA response goes through a review and 
reconciliation process to ensure all respons ive documents are marked and redacted appropriately. 

in regards to the DoS FOIA process. However, there is an 


appeals process which involves a FOIA review board managed out of the DoS Information Oversight 
Office. 
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(U//FOUO) Responsive documents to FOIA requests are also placed on the DoS FOIA website in 
their releasable form to avoid redundant FOIA requests from other parlies. 

(U// FOUO ) KENNEDY recalled discussions concerning CLINTON wanting to cull her emails 
prior to producing emails related to the Congressional/FOIA requests. The purpose of the cull was to 
remove emails related to personal communications between CLINTON and her family that were not 
relevant to DoS matters. DoS was not involved in the cull, as it is the responsibility of the individual to 
produce records of relevance for the record. KENNEDY did not recall who was involved in assisting 
CLINTON cull her emails. 

(U// FOUO ) DoS employees identify their own files for the record and can generally archive them 
in the State Messaging and Archival Retrieval Toolset (SMART) system, which allows for electronic 
marking/tagging of emails for the record. However, SMART is not used by the Executive Secretariat, 
thus CLINTON would have likely had to use a print and file system, or simply keep all of her emails for 
the record. As a matter of personal preference, KENNEDY retains all of his electronic DoS 
communications in an active file. 

(U//FOUO) When asked in retrospect if he had concerns over how DoS conducted its response to 
the FOIA request regarding CLINTON'S emails, KENNEDY responded “yes and no.” KENNEDY did 
not elaborate. KENNEDY further explained he contacted the FBI Deputy Director and requested an 
electronic copy of all the CLINTON emails turned over to the FBI in regards to the FBI's investigation, 
so DoS could make a better assessment in regards to evaluating their role/response. 
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(U// FOU Q) KENNEDY “categorically rejected” allegations he attempted influence FOIA 

markings to protect and/or mask classified information. KENNEDY_ 

and described her as someone who “says it like it is” and has “no fear of telling truth to power.” 
KENNEDY further explained he has full confidence I would not allow undue influence to 

effect her ability to properly carry out the FOIA process in accordance with the Presidents mandate to 
both air on the side of transparency and national security. 


(U/ /FOUO ) KENNEDY was one of three people he was awar e of at DoS w ho have the authority 

being the other two. A 


to upgrade the classification of a document, the Secretary of State and[ 


classification upgrade would be warranted in a situation where the change in a government may change 
relationships, and information that would not have endangered the United States or sources before said 
government change would then be considered a threat to national security or to the sources safety. 


(U//FOUO) KENNEDY stated he was available for re-contact should interviewing agents have 
additional questions to ask at a later date. 


(U//P0tf0) Agent notes are maintained in a IA envelope. 
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_ (U/ft HO) On December 14,2015, 

_inf ormati on Resource Management/Executive Secretariat, US Department of State, offi ce phone 

_ Iwas interviewed bv Federa l Bureau of Investigation (FBI) Special Agent (SA) 

| and SA | Afte r being advised of the identity of the interviewing agents 

and the nature of the interview, provided the following: 

(U/ /rOU 0) | n Information Resource Management 

(IRM) for the Executive Secretariat (IRM/ES) and w as in that position during Secretary HILLARY 
CLINTON's time in office. Part of | |j ob was to maintain and support the infrastructure for 

the UNCLASSIFIED an d SECRET netw orks for the Executive Secretariat. Every Department of State, 

hereafter State, Secretary_|has interacted with, except for Secretary JOHN KERRY, has used 

personal email during his or her time m office For example. Secretary COLIN POWELL used America 
Online. Secretar y Clinton, howe ver, was the first Secretary to use a privately maintained email server, 
hereafter Server. | | did not agree with the decision, but it made sense to him because 

Secretary CLINTON had used the Server for the previous two years. Secretary CLINTON did not have a 
desktop computer in her office to ac cess email while at State, but did have non-SCIF space near her office 
where she could use her BlackBerry. b elieved Secretary CLINTON received an 

operatio nal security brie fmuthat involved the National Security Agency after being sworn in as Secretary 
of State, r I from the Bureau Security Office would have coordinated the briefing. 

(U/ /FOUO )|_[became aware of Secretary CLINTON's Server at the time she was 

sworn in as Secretary of State. She was offered a State email addr ess, but decided to use the Server from 
her 2008 presidential campaign. It was at this time | [ net B RYAN PAGLIA NO. 

PAGLIANO was the administrator for Secretary CLINTON'S Server, so|_interacted with 

him to keep it communicating with State systems. For example, there were approximately 5-6 instances 
where emails sent by Se cretary CLINT ON to State employees, or vice-versa, were not received by the end 

user. In these instances,_and PAGLIANO worked together to modify settings so the emails 

would make it through. Additionally, the two worked to establish transport layer security (TLS) between 
State systems and the Server as a security measure. 

(U//FOUO) Since PAGLIANO was an IRM Schedule C employee of State._invited 

him to various briefings regarding security and system vulnerabilities PAGLIANO's job at State was 
policy de velopment relat ed to mobile computing, so these briefings were also relevant to his role in that 
capacity. specifically recalled discussions about Bluetooth vulnerabilities and blue jacking, 

because 
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those vulnerabilities werel 
Although! 


primary concern due to Secretary CLINTON's BlackBerry use. 


made an effort to keep PAGLIA NO informed o f security matters, he was not 


involved in decisions regarding S erver security, n or does[ 


actively monitored for intrusions. 


know if the Server was hacked or 
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did not believe it was possible for PAGLIANO to secure 


the Server as well as State servers, which are monitored and hardened by a team of full time employees. 
Additionally, he did not know how the Server was paid for or where it was physically located. 

ftJ//rOUO ) In approximately February 2011, several State employees were the victims of a gmail 
and yahoo hack where users received an email with, a link di recti no thereto change their email password. 

The link took users to a fraudulent site that allowed_ 

pas sword. The hackers then used the passwo rd to modify the users gmai 
to a l 11 [g roup sent a security alert to POEMS users regarding the bl 

hack, but since PAGLIANO was not a POEMS user, he would not have received the alert. 


to obtain the user's gmail/yahoo 
/yahoo account to auto-forward 


(U//E0t+6) 


was asked to delete approximately two emails related to the public 


per DOS 
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release of Secretary CLINTON'S emails. The request was in relation to cleaning unclassified State 
systems, however, due to an FBI preservation request ] ~] had not deleted any 

communications. He recalled one of the emails bein g from an Amba ssador and began with a phrase 


similar to “My classnet is down, so I'll start here, 
offered to provide a copy of the emails if requested 


could not recall any other details, but 
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I * J * ip 

Secretary CLINTON's email account while she was at State insofar asl 


There were no sp ills of classified information on 


was aware. 


(U//F QUO ) Secretary CLINTON received classified information in a paper briefing book that 
was maintained by her special assistant. When outside of Washington, DC, State travel teams turned 
hotel rooms into classified information processing areas where personnel, including the Secretary, could 
communicate securely. 

(U// TOUO) Only Secretary CLINTON's inner circle could email her directly. This group 
consisted of JAKE S ULLIVAN. CHE RYL MILLS, and HUMA ABEDIN for State Department purposes. 

For this reason, when_emailed ABEDIN's BlackBerry, he considered it the equivalent of 

emailing Secretary CLINTON. 


(U//F0H©) 


itated the FBI's investigation would be incomplete without talking to 


PAGLIANO. PAGLIANO is a very sharp and techni cally savvy indi vidual who likely took action based 


on the security information and briefings provided by 


others. Furthermore, 
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believes additional information could exist on the accounts of MILLS because she served 


as a proxy for Secretary CLINTON 
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STEVE A. LINICK, Inspector General, United States Department of State, Office of Inspector 
General (STATE IG), 2121 Vi rginia Avenue, N W, S uite 8100 . SA-3, Washington, DC 20037, telephone 
m obile phonel lemaill [fiSstate.aov was interviewed in person by 


FBI Special Agents 


JandE 


After being advised of the identity of the 


interviewing Agents and the nature of the interview, LINICK provided the following information: 
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On or about March 12, 2015, STATE IG received a letter from U S Senators Bob Corker, Richard 
Burr and Ron Johnson. The letter requested a review of State Department employees' usage of personal 
email for official purposes and coordination with relevant agencies to determine whether classified 
information was transmitted or received by State Department employees over personal systems. On April 
16, 2015, pursuant to this letter, STATE IG initiated a review of the use of personal communications 
hardware and software by five Secretaries of State and their immediate staffs. The review covered current 
Secretary of State John Kerry all the way back to former Secretary of State Madeleine Albright. STATE 
IG's review was further broken down into three categories 1) On-boarding Process (which looked into the 
approval process for the use of personal networks), 2) Preservation of Records (how records were 
maintained/preserved), and 3) the FOIA response. 


LINICK believed STATE IG’s office was not qualified to determine whether classified 
information was transmitted and referred that portion of the review to the Office of the Inspe ctor Gener al 
of the Intelligence Community (ICIG). Separately. STATE IG had the Benghazi review andl I 


Department of State was also conducting a Freedom of Information Act (FOIA) review of fifty five 
thousand pages of emails belonging to Secretary Clinton pursuant to a court order. In December 2014, the 
Department of State received hard copies of those documents from Secretary Clinton's Counsel. 


LINICK initially believed Department of State received electronic copies of Secretary Clinton's 
email from her private server. During a July 1, 2015 meet ing with STATE IG. Patr ick KENNEDY, Under 


Secretary for Management, U.S. Department of State and 


advised STATE IG the 


Department of State had obtained an electronic copy of Secretary Clinton's email. On July 10, 2015, 
STATE IG requested two copies of the .PST files for use by STATE IG and ICIG. Later, KENNEDY 
advised STATE IG that the Department of State only had hard copies of the documents, which were 
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scanned and uploaded to ClassNet. LINICK obtained preserved Department of State email records for 


MILLS and ABEDIN. 


On May 26, 2015 ICIG and STATE IG sent a joint preservation letter to Williams & Connolly for 
the @clinontonemail.com account records in their possession. Although, LINICK was generally aware of 
the status of ICIG's ongoing review to identify classified information, which consisted of jointly working 
with the Department of State FOIA staff, LINICK was not heav ily involved in that process. LINICK 
recommended the FBI inte rview Departm ent of State employees] loffice of Infor mation 

Programs and Services and 


]Office of Global Information Services Both[ 

Jwere involved in the FOIA review process and a lleged there were poten tially hundreds of 


and 


classified emails fou nd during their review. 


I 


further alleged that tw> 


currently working at State Department were meddling with the FOIA review process. 
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On or about June 19, 2015 STATE IG and ICIG jointly made four recommendations to the State 
Department related to the FOIA review process. The recommendations were as follows: 


1. Recommend State Department FOIA office request staff support from 1C FOIA offices to assist in 
the identification of intelligence community equities; 

2. Recommend IC FOIA officers review the emails to ensure that ClassNet use is appropriate before 
transmitting to the State Bureaus for review; 

3. Recommend State Department FOIA seek classification expertise from the interagency to act as a 
final arbiter if there is a question regarding potentially classified materials; and 

4. Recommend State Department FOIA Office incorporate the Department of Justice into the FOIA 
process to ensure the legal sufficiency review of the FOIA exemptions and redactions. 


Based on a later response from KENNEDY, the Department of Stat e had accepted 
recommendations number one and three. LINICK s uRi>ested the FBI talk to 


]who both worked at STATE IG. and 


and 


Jwould be able to give more insight into the FOIA review process, and S 


interaction with Secretary Clinton's counsel, Williams & Connolly. LINICK believed 
emails back and forth with David KENDALL, Secretary Clinton 1 s attorney. 


ATE IG's 

Ihad sent 
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LINICK surmised the Department of State Foreign Affairs Manual that was in use during 
Secretary Clinton’s tenure as Secretary of State did not give clear and specific guidance regarding the use 
of private email, although it was highly discouraged. If employees used private email to conduct official 
State Department business, that email had to be forwarded to an @state.gov email within twenty days 
after being sent. The Department of State had no process for approving the use of private networks. There 
were no rules in place that specifically denied Secretary Clinton the use of her private network. 
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LIN1CK did not believe he was qualified to explain the Department of State's retroactive 
classification process. LINICK did not know whether the Department of State had provided a safe to 
Williams & Connolly, nor did LINICK know if the Department of State had the authority to certify a non¬ 
government facility as secure storage for classified information. 

LINICK advised Secretary Clinton had brought Bryan PAGLIANO into the Department of State 
to set up her private network PAGLIANO was still a Department of State employee who worked in the 
Department of State's information technology department. However, PAGLIANO refused to be 
interviewed by STATE IG PAGLIANO informed STATE IG he was represented by counsel from Akin 
Gump Straus Hauer & Feld, LLP LINICK recommended the FBI interview PAGLIANO. 

LINICK did not intend on directly contacting Secretary Clinton to request electronic copies of her 
private network email. Since there was a spillage of classified information, for which STATE IG is not 
equipped to handle, the referral was made to the FBI. 
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JUSTIN GREGORY COOPER, date of birth (DOB) 

and social security account number (SSAN)|_ was 

7 jpwpri hv fpUp r.q i Bur eau of Investigation (FBI) Special Agents 

__ land | | at th e law offices of 

TTocated - ^] I Wa shington DC 


20006. Also present for t he i nterview were I_| attorneys!_ 

| and a s well as attorney 

| | U.S. Department of Justice and | 

Assistant United States Attorney for the Eastern District of Virginia 
After being advised of the identity of the interviewing Agents, and 
the nature of the interview, COOPER provided the following 
information: 


Before commencing t he interview , COOPER'S attorney |_ 

_stated the offices of | were in possession of two (2) 

Apple MacBooks and one (1) Seagate external hard drive belonging to 
COOPER. COOPER used one of the MacBooks from approximately 2009 to 
2013 and transferred his files to the second MacBook in approximately 
2013. The Seagate external hard drive contained back-up files 
belonging to COOPER. On the foregoing digital media existed files 
related to the upgrade of former Secretary of State HILLARY CLINTON'S 
BlackBerry, incurred while COOPER upgraded HILLARY CLINTON'S 
BlackBerry device in 2009 and 2011. These files were separate, 
segregated and labeled in folders on each of COOPER'S digital media as 
described above. Additionally, each of COOPER'S digital media items 
contained email exchanged with a n email a ddress belonging to HILLARY 

CLINTON, HDP.228c.UntenemaH .com . _ indicated COOPER is willing 

to discuss providing the FBI the folder containing BlackBerry files 
relating to the upgrade of HILLARY CLINTON'S device, and all email 
involving the email address HDR22(4c 1 intonemai 1 .com. Additionally, 
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indicated COOPER did not have the right to provide consent to 
search t he foregoing BlackBerry files and to gain consent to search, 

believed the FBI would need to consult HILLARY CLINTON'S 
lawyers at WILLIAMS AND CONNOLLY. 

COOPER stated he worked for former President BILL CLINTON 
for approximately 16 years as an aide serving many capacities. In 
2007, COOPER and other aides debated using a private server for the 
sole purpose of email exchange and as a result, a contract with Apple 
was signed for the set-up and administration of an OS X server 
(hereafter, Apple server). The foregoing Apple server was installed at 
the CLINTON residence located in Chappaqua, New York and was online in 
and arou nd June 2008 and configured for a handful of users. COOPER 
recalled _ 

| having email 

accounts using the domain presidentclinton.com. The domain 
wjcoffice.com was another domain used for BILL CLINTON related staff 
and email, but COOPER referred to it as a legacy domain that had 
mostly forwarded email. BILL CLINTON did not have an email account on 
the Apple server and did not use email as far as COOPER understood. In 
January 2009, HILLARY CLINTON was looking to move away from a 
BlackBerry with AT&T service, and decided to register the domain 
clintonemail.com and host it on the Apple server. COOPER had no 
specific memory, but believed he could have been the individual to 
register the domain because he handled financial issues for the 
CLINTONS. In or around January 2009, the users determined the Apple 
server was not robust enough and based this assessment on unreliable 
BlackBerry connectivity. At that time, the Apple server was not run in 
conjunction with a BlackBerry Enterprise Server (BES). 

In or around March 2009, BRYAN PAGLIANO, an Information 
Technology (IT) professional used by HILLARY CLINTON, took full 
control of setting up a Windows Small Business Server (hereafter, 
Windows server) as well as a BES, at the CLINTON residence in 
Chappaqua, New York. PAGLIANO built the server from equipment used in 
HILLARY CLINTON'S campaign for the democratic nomination to run for 
President of the United States. COOPER did not know where PAGLIANO 
built the server, but knew it was in place and running at the 
Chappaqua residence in or around March 2009. COOPER was aware that 
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PAGLIANO set-up firewalls, spam filters and possibly Cisco Adaptive 
Security Appliance (ASA) software, but only PAGLIANO would know the 
configuration of the set-up. PAGLIANO managed the porting of users 
from the Apple server to the Windows server, as well as handled all 
software upgrades and general maintenance. COOPER believed there was a 
back-up drive as part of the Windows server and wasn't aware of any 
additional back-ups, although he recalled many boxes around the 
Windows server and reiterated PAGLIANO would know the exact 
configuration. Concerning the various avenues of connectivity to the 
server for user devices, COOPER referred Agents to PAGLIANO. 
Cablevision provided internet service to the CLINTON residence in 
Chappaqua, and that internet service was used to connect the Windows 
server. COOPER believed no outside spam service provider was retained 
for the Windows server. COOPER believed in instances where the Windows 
server went down, like in the event of a power outage, emails were re¬ 
directed to a gmail account as a back-up. COOPER was aware of two (2) 
power outages, based on storms or natural disasters, occurring during 
the lifecycle of the Windows server, but was not aware of any specific 
users or corresponding gmail accounts that had email forwarded. 

COOPER was granted administrator rights, along with 
PAGLIANO, to the Windows server and described his role as the customer 
service face. As part of this role, COOPER could add a user or reset a 
password. COOPER also continued in his role of acquisition or 
purchasing for the CLINTONS, and this extended to server related 
items. For instance, COOPER recalled using both Network Solutions and 
GoDaddy to register domains, but would only have used these companies 
because he was directed to, either by Apple or PAGLIANO. COOPER read 
in the press about the Windows server being associated with a company 
called Perfect Privacy, and would not be surprised if it was accurate, 
but had no specific memory of using the company. COOPER registered a 
Secure Socket Layer (SSL) at PAGLIANO's direction and recalled it 
being used for more security when users accessed their email from 
various computers, and eventually, iOS devices. Additionally, COOPER 
vaguely recalled the Windows server using a Microsoft software product 
called Forefront. 
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COOPER stated there was no official security policy given to 
users of the Windows server. Generally, when users received 
suspicious emails and forwarded them to COOPER, he would forward them 
to PAGLIANO. As an administrator of the Windows server, COOPER would 
get emails indicating brute force attacks (BFA). COOPER would also 
forward those to PAGLIANO and recalled PAGLIANO installing Internet 
Protocol (IP) blocking software in an attempt to thwart the BF A. On at 

least two (2) occasions, COOPER remembers making _ Special 

Agent in Charge, United States Secret Service, aware of suspicious 
email received on the Windows server. 
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COOPER recalled conversations between CHERYL MILLS and BRYAN 
PAGLIANO in or about June 2013 pertaining to the decommissioning of 
the Windows server and the next phase of communication infrastructure 
for HILLARY CLINTON, after her tenure as Secretary of State in 2013. 
Although COOPER wasn't involved and doesn't recall how they were 
selected, PLATTE RIVER NETWORKS (PRN) was chosen to maintain a server 
for the CLINTONS. COOPER did recall some communication with PRN 
regarding the transfer of user names and accounts from t he Windows 
server to PRN. An individual employed by PRN named | | Last Name 
Unknown (LNU) was granted administrator rights on the Windows server 
in order to effect the transition to PRN's control. At this point. 
Interviewing Agents displayed a document to COOPER identifying 
administrator accounts on the Win dows server. COOPER identified the 
adm inistr ator account ' I ' as most likely being the user name 

for | | LNU from PRN. In or around July 2013, COOPER received 

instructions for his email account that indicated PRN was in control 
of the Windows server email data. Due to COOPER'S transition in 
employment, his email account was off the server in or around November 
2013. COOPER does not know when the Windows server was shut down and 
how or where it was transported. 
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COOPER had no knowledge of the process HILLARY CLINTON 
undertook when acquiring her emails from the clintonemail.com domain 
and providing them to the Department of State as part of a Freedom of 
Information Act (F0IA) request. COOPER speculated that PRN was 
involved in the acquisition of the entire content of her account and 
DAVID KENDALL was consulted when determining which specific emails 
would be turned over. 
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COOPER believed the Windows server had three domains: 
wjcoffice.com, presidentclinton .com and clintonemail.com. To the bes t 


of COOPER'S memory, he 

recalled 
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having email accounts using the 

domain presidentclinton.com or 


wicoffice.com, as part 

of their work 

for BILL CLINTON. COOPER believed 


HILLARY CLINTON,f 

and 

HUMA ABEDIN had email accounts 



under the domain clintonemail.com as part of their association or work 
for HILLARY CLINTON. COOPER believed the Windows server was used 
exclusively for the exchange of email. 


COOPER has never stored or transmitted classified 
information over an unclassified network and was unaware of any 
discussions regarding the transmittal of classified information on an 
unclassified network by others. 

Notes of this interview, as well as the document displayed 
to COOPER, will be maintained in a FD-340 envelope and filed with the 
captioned investigation. 
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(U//F OUO ) On March 2, 2016, JUSTIN GRE GORY COOPE R, date of birth (DOB)|_ 

and social security account num ber ('SSANlI | was interviewed by Fe deral Bureau 


of Investi gation (FBI) Spec ial Agents (SAj[ 


offices on 


lo cated atf 


andf 


present for the i nterview were[ 


jattorneys|_ 


at the law 
Washington DC 2000 6. Also 
and 


as well as U S. Department of Justice attorneys! 


an 


5 [ 


After being advised of the identity of the interviewing Agents, and the nature of the 


interview, COOPER provided the following information: 

(U//FB UQ ) After reviewing an email referencing a new laptop for HILLARY CLINTON, 
COOPER recalled a Macbook Air purchased for CLINTON in the 2008 timeframe, but did not believe 
she ever used it. He did not recall the backup drive referenced in the email The Macb ook was likely 

rL . 


purchased with a credit card because C OOPERl 
accounts and, therefore, had credit cardsL 


to CLINTON 1 s 


COOPER was not 


involved in the setup of the Macbook, but believed it was setup to access CLINTON's email. The intent 
was for C LINTON to use the M acbook in addition to her BlackBerry. In addition to COOPER, HUMA 
ABEDIN j I and, later, MONICA HANLEY frequently assisted CLINTON with 

setting up any new technology devices. 

(U/ / F OUO ) COOPER was aware CLINTON had Sensitive Compartmented Information Facilities 
(SCIFs) in both her New York residence as well as her residence in the District of Columbia (DC). The 
SCIF at the DC residence f 1 COOPER knew CLINTON to have access to the SCIF 

and knew ABEDIN was frequently there, but did not know if ABEDIN could access the SCIF when it 
was secured. COOPER did not have the combination to open the SCIF. The SCIF doors at both 
residences were not always secured, including times when CLINTON was not at the residences. When 
CLINTON became the Secretary of State, COOPER assisted the team from the United States Department 
of State (State) with questions regarding the communications infrastructure at the New York residence. 
Both residences had safes, home computers, secure Cisco phones, secure and non-secure fax, and secure 
video capabilities inside of the SCIF. COOPER was unaware of who would receive secure faxes when 
they we re transmitted The only individual at either residence COOPER believed to have a clearance was 
possibly_as a result of his time in the military 


b6 

b7C 


b6 

b7C 


b6 

b7C 


Investigation on _ 

03/02/2016 

_ai_ 

Washington. DC 


File It 1 

1-302 


Date dictated 

N/A 

By SAl 

Ua|~ 


1 - 



This document contains neilher rccommcndaiious nor conclusions of ihc FBI. Ii is the property of lire FBI and is loaned to your agency: ii 
and its contents arc not to be distributed oulsidc your agency. 


UNCLASS I FI ED//F OU© 



UNCLASS I FI ED/ / F&U9- 


FD-302a (Rev. 10-6-95) 


Comimiaiion of FD-302 of 


Interview of Justin Grcuon Cooper 


On 03/02/2016 . Page 


Leading up to the installation of the Apple Server, COOPER, for several reasons, 
identified a need to setup a private email server located at the CLINTON residence. Those reasons 
included: 

• segregating different aspects of WILLIAM CLINTON's post-presidency activities 

• separating politics from the work of the Clinton Foundation _ 


President CLINTON's office and might attempt to gain physical access to the server if it 
was located in the office 

• An outside vendor might not report a hack attempt 

(U//FOUO) After a series of phone calls with Apple, COOPER contracted with Apple Business 
Services to setup a server, hereafter Apple Server, for handling email for a small number of users working 
in the office of President CLINTON. COOPER did not recall how he paid for the Apple Server, but he 
likely used a credit card. Apple installed the Apple Server in the basement of the New York residence, 
however, COOPER did not recall if he was present for the setup. The CLINTON family and the staff at 
the New York residence were the only individuals with physical access to the Apple Server. The Apple 
Server design included a backup to an internal RAID drive Apple assisted COOPER with the setup of 
the wjcoffice domain on the Apple Server, but Apple did not have ongoing access to the Apple Server or 
its contents. COOPER was the only one with administrative access to the Apple Server initially, later, 
BRYAN PAGLIANO was given access to effect the transfer of data on the Apple Server to a Microsoft 
Exchange server, hereafter Exchange Server. COOPER did not assist in exporting any of the data or files 
to the Exchange Server, nor did he create any archives of clinjonemail.com data. The decision was made 
to move to the Exchange Server because the Apple S enter did pot keep up with changing developments in 
technology and, eventually, users experienced problems'with email delivery on their BlackBerry devices. 

(U//FOUO) COOPER believed HILLARY CLINTON had an email account on the Apple server; 
however, ABED1N did not have an account. CLINTON either came up with or approved the username 
HDR22 for her email address. 
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(U/7FOUO) After reviewing an email fragment referencing a potential hack of the Apple Server, 
COOPER stated he could not recall any details and did not believe the hack was ever confirmed. 

(U// FOUO ) CLINTON obtained a new BlackBerry device whenever she had an issue with her 
device, such as a trackball failure, cracked screen, or the device was too heavy. When one of these issues 
occurred, whoever was worki ng in close pro ximity to C LINTON would obtain a new device for her. 


COOPER believed HANLEY,|_| and|_[to be the individuals who procured new devices 

for CLINTON. He did not recall obtaining devices on eBay or similar outlets. COOPER sometimes 


b6 

b7C 


UNCLASS I FI ED//-F OUO 




UNCLASSIFIED//Feue 


FD-302a (Rev. 10-6-95) 


Continual ion of FD-302 of_ Interview of iiisim Grcuon Cooper _. On 03/02/2016 . Page 3 _ 

assisted others with completing the switch to a new device by leading them through the process of 
backing up data from the old device and transferring it to the new device. After these steps were 
complete, COOPER would activate the new device on the Apple Server or, later, the Exchange Server. 
The two BlackBerry backups previously provided to the FBI by COOPER were likely from situations 
where COOPER directly handled the transition between devices. In these cases, COOPER destroyed the 
old devices by breaking them in half or hitting them with a hammer. 

(U//FOUO) After reviewing an email referencing the replacement of CLINTON and ABEDIN's 
SIM cards, COOPER stated he did not recall a process whereby users would regularly switch SIM cards 
in their mobile devices, nor did he recall why CLINTON and ABEDIN received new SIM cards in the 
specific situation referenced in the email. 


(U/ /FOUO) After reviewing an email dated May 30, 2009, COOPER stated he could not recall 
any details regarding a new BlackBerry for CLINTON in that timeframe. 


(U// FOU6 ) After reviewing an email regarding new security policies, COOPER stated Research 
in Motion (RIM), provided new tools on a regular basis to increase the security of BlackBerry devices. 
Typically, when a user switched to a new device, COOPER would implement an updated security policy 
on the device. As an example of a feature he would add to a security policy, COOPER stated he required 
users to enter a more complex password. Users on older devices would have the old security policy. 


Q J// E f )U O ) The iPads used by CLINTON were for reviewing email and other content. COOPER 

stated_[advocated for CLINTON's use of an iPad. Regarding specific iPads, COOPER recalled 

an iPad mini and at least one iPad having a cellular data connection in addition to a wireless network 
connection. COOPER never set up any of the iPads and, therefore, had no information on Apple IDs, 
iCloud accounts, or device passwords. One of the iPads locked out CLINTON's email account on one of 
the servers when it attempted to connect using an old password. COOPER could not recall on which 
server this event occurred. 
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(U/ /FOU Q) After reviewingan email dated July 26, 2010, with the subject line “Re: CC for 


hPad,” COOPER confirmed 


purchased an iPad for CLINTON on or about that date. 


(U/ /FOUO ) After reviewing a chart with the heading “202 


COOPER stated he 


recognized the phone number as CLINTON 1 s second phone number. CLINTON usually carried a flip 
phone with her BlackBerry because it was more comfortable to talk on. Additionally, CLINTON could 
use her BlackBerry while talking on the flip phone. COOPER did not recognize any of the specific 
phones displayed in the chart. 


(U//FeU©) COOPER stated[ 


_| and he utilized Google 

hosting services for email when there was a problem with the Apple Server or Exchange Server. To 
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effect this change, COOPER would alter the settings on a user's device to check Google for new 
messages. COOPER could not recall if CLINTON or ABED IN utilized Google hosting services during 
Hurricane Sandy or other outages. If they had used Google, it would have been a team effort to set up 
their devices because COOPER was traveling at the time 

(U/ /FOUO ) After reviewing emails regarding the transfer of an archive of HILLARY 
CLINTON's emails, COOPER stated he did not recall providing a laptop to HANLEY for this purpose, 
but it was conceivable he could have repurposed a laptop from President CLINTON's office and assisted 
in the transfer of the email files. COOPER did not recall a USB flash drive containing the email files. He 
also did not recall HANLEY returning the laptop in early 2014, however, he became a consultant to 
President CLINTON in the fall of 2013 and was no longer involved in day-to-day business by 2014. 


(U//FOI 4Q) COOPER had mi nimal contact with Platte River Networks (PRN). He recalled one 

to pass along passwords, but did not have any other involvement 


ith[ 


interaction wit 

with PRN. COOPER did not have an email account with President CLINTON's office after he became a 
consultant. 


(U// F ’ 0U 6) COOPER had no knowledge of Freedom of Information Act production or the cull 
down process, as it related to CLINTON'S emails from her time as Secretary of State. 


(U//FOUO) Notes of this interview, as well as the documents displayed to COOPER, are 
maintained in a FD-340 envelope and filed with the captioned investigation. 
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(U//FOUO) 
birth (DOB)1_ 

On June 21. 2016. JUSTIN GREGORY COOPER, date of 
| and social security account number 

(SSAN) | 

was interviewed teleohonicallv bv Federal Bureau 

of Investigation ( 

lBI) Special Agents (SA) and 

Also on the call for the interview were 

1 1 attorneys 1 and 1 1 as well as attorney 

1 _ 

U.S. Department of Justice. After being advised of 


the identity of the interviewing Agents, and the nature of the 
interview, COOPER provided the following information: 


(U// FQU Q) COOPER recalled a personally-owned iMac computer 
in the Sensitive Compartmented Information Facility (SCIF) of both the 
Washington, DC and Chappaqua, NY residence of HILLARY CLINTON. Despite 
not knowing the exact model, COOPER described them as being identical 
models with a one inch thick monitor. 

(U// FOUO ) COOPER stated an Apple server was set-up for email 
exchange for aides working for former President WILLIAM CLINTON. 

COOPER did not recall a specific person deciding to set-up the server, 
but more a consensus among aides. 

(U//FOUO) In or around December 2008, COOPER recalled having 
conversations with HUMA ABEDIN pertaining to HILLARY CLINTON moving 
away from an AT&T provided email account and establishing an email 
domain on the Apple server. COOPER and ABEDIN discussed a covert email 
domain versus a domain including the CLINTON name. ABEDIN "blessed 
off" on the @clintonemail domain name and COOPER registered the domain 
in January 2009. COOPER could not recall who created the handle of 
HILLARY CLINTON'S email account hdr22 @clin t onema il.com, but thought 
she typically approved her email account names. COOPER did not know if 
anyone else had HILLARY CLINTON'S email account password, but stated 
if anyone would, it would be ABEDIN. 
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(U/ /f* 0U9 ) COOPER did not have a specific memory of 
registering HILLARY CLINTON'S email domain and setting up her 
clintonemail.com account on the Apple server. Most likely, COOPER 
believed he registered the domain, and added HILLARY CLINTON'S email 
account to the Apple server, because he could think of no one else 
that would have performed that task. COOPER stated he most likely 
initially set HILLARY CLINTON'S hdr22(jcl intonemai. 1 .com account to 
forward to her BlackBerry. When HILLARY CLINTON would reply from her 
BlackBerry, her email address would represent as 

hdr 22gel in t e nemai 1 ■ c om, with that configuration, HILLARY CLINTON'S 
incoming email content would have resided on the Apple server for a 
period of time, but not her sent messages. Again, COOPER stated this 
was "all a blur" to him and he was relaying the most likely scenario. 

(U// FQUQ ) In early 2009, COOPER recalled conversations with 
ABEDIN regarding moving to another email server system, but could not 
recall specifics. COOPER recalled ABEDIN knew BRYAN PAGLIANO from his 
work on CLINTON'S 2008 presidential campaign and held him in high 
regard. PAGLIANO began building a new email server system in early 
2009. PAGLIANO had to have been given access to the Apple server in 
order to migrate email accounts and content to the new server he 
built. COOPER did not recall giving PAGLIANO administrator access to 
the Apple Server. 

(U/ /FOUO ) COOPER did not specifically recall acquiring an 
Apple computer for HILLARY CLINTON to use in April 2009. In general, 
COOPER recalled multiple attempts to get CLINTON to use Apple 
products. 


(U// FQUO ) Around January 2011, COOPER recalled receiving 
numerous alerts in his email indicating email account users of 
PAGLIANO's server were entering the wrong log-in credentials. PAGLIANO 
had set-up the server so that COOPER would receive failed log-in 
notifications. COOPER thought this to be a brute force attack on the 
server and contacted PAGLIANO. COOPER recalled nothing else regarding 
this incident. 

(U//-F OUO ) COOPER recalled HILLARY CLINTON'S email account 
was changed to hrodl? 8 c 1 i n fc onema i 1 . com after SIDNEY BLUMENTHAL's email 
account was hacked around March 2013. Although COOPER could not be 
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certain, COOPER thought he could have been the one to change the email 
address for CLINTON. 


(U//F0U©) COOPER thought PAGLIANO had disabled the built-in 
Administrator account on the server PAGLIANO built. COOPER had his own 
system administrator account on PAGLIANO's server. 


(U// FQUQ ) In order for Platte River Networks (PRN) to bee jin 
administe ring an email server for the CLINTONS, PAGLIANO gave 


|access to PAGLIANO's server. COOPER was unsure when this took 
pl ace, but t hought it was in May or June of 2013. COOPER did not know 
if 


removed COOPER'S administrator account. 


(U//-F QUQ ) COOPER could not recall when he last logged into 
PAGLIANO's server. COOPER did not know what "IP scanning tools" were. 
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(U//FW6) In the spring of 2013, COOPER recalled giving MONICA 
HANLEY a MacBook laptop and walking her through downloading CLINTON'S 
email from the PAGLIANO server to the MacBook. COOPER did not recall a 
specific purpose for this other than maintaining a back-up copy of 
CLINTON'S email. COOPER was unaware of a USB Flash Drive containing 
CLINTON'S email. COOPER was unaware of the location of the MacBook 
containing CLINTON'S email. 


(U//'F©UO) COOPER stated 
Apple server in anyway. 


did not have access to the 
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(U//-F OUO ) Notes of this interview will be maintained in a FD340 
envelope and filed with the captioned investigation. 
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(U//FOU0) On Febiuaiy 19, 2016, ERIC J BOSWELL, DOB was interviewed bv 

Federal Bureau of Investigation (FBI) Special Agentsl 

land at the law 

offices of 

1 Washington DC. Also 

present for the interview was BOSWELL's attorney 

After being advised of the identities 


of the interviewing agents, and the purpose of the interview, BOSWELL provided the following 
information: 


(U/ /FOUO ) BOSWELL served as the United States Assistant Secretary for State for Diplomatic 
Security (DS) from June 200S until December 2012, however, BOSWELL did not resign from DoS until 
the Fall of 2013. Following his resignation from Department of State (DoS), BOSWELL went into 
“When Actually Employed” (WAE) status with DoS, which essentially means he still works for and is 
paid by DoS on an as needed basis. 

(U/ /FOU O) As the Assistant Secretary of State for Diplomatic Security, BOSWELL was 
responsible for overseeing the security of DoS communications, personnel, and programs. 

(U/ /FQUQ) BOSWELL did not directly oversee the security of the Executive Secretariat, to 
include former Secretary of State HILLARY R CLINTON. A Security Officer who reported further 
down in BOSWELL's chain of command had direct oversight over the Executive Secretariat on the 
seventh floor offices commonly referred to as “Mahogany Row.” BOSWELL could not recall the names 
of any of the Security Officers who were assigned to Mahogany Row during his tenure. 

(U//F QUO ) BOSWELL had no knowledge CLINTON was using a personal email, nor that she 
was operating said email off of a personal server while she was Secretary of State. He first learned of the 
private server and personal email use when it was reported in the Press. BOSWELL further stated he 
found former Secretary CLINTON to be “very responsive to security issues.” 

(U/ /FOUO) Agents asked BOSWELL to review a redacted memo titled “Use of Blackberries in 
Mahogany Row.” The memo was redacted by DoS in response to a Freedom of Information Act (FOIA) 
inquiry. After reviewing the memo, BOSWELL stated the memo was drafted early in the Administration, 
and shortly after CLINTON began her tenure at DoS. 
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(U/ /FOU Q) BOSWELL recalled CLINTON 1 s DoS executive staff initially inquiring about the 
possibility of acquiring Blackberries that could be configured for classified material. BOSWELL, tasked 
his staff to research the request and possibilities. BOSWELL staff notified him that such a 
device/configuration was not possible, which was relayed to CLINTON's executive team via the memo. 

(U//FOU©) Furthermore, BOSWELL stated that he recalled there was general concern around the 
same time regarding the possibility that CLINTON'S staff might use their Blackberries on Mahogany 
Row, which is a Sensitive Compartmented Information Facility (SCIF). According to BOSWELL there 
was no specific instance or report that any specific person/people were using Blackberries on Mahogany 
Row at the time. However, there was some general concern within DoS security personnel that 
CLINTON's executive staff may try to use their Blackberries in the SCIF as they were almost all brought 
on to DoS from CLINTON's campaign team, and thus were very accustom to using their Blackberries. 
Although BOSWELL could not recall a specific report of the use of Blackberries on Mahogany Row, he 
stated that “they were told to stop (using their Blackberries in the SCIF) and they did.” DS never 
sanctioned the use of Blackberries on Mahogany Row 

(U//F'0tJ©) Agents also asked BOSWELL to review a redacted email dated 1/24/2009 with the 
subject line “Series of questions.” The email exchange, which BOSWELL was not copied on, related to 
the set up of a “stand-alone separate network PC” for CLINTON. In response, BOSWELL stated the 
email was written three days after CLINTON began her tenure as Secretary of State. LEWIS “Lou” 
LUKINS who was included in the referenced email exchange, was the former Chief Administrative 
Officer of the Executive Secretariat. BOSWELL explained that a “stand alone” work station does not 
necessarily mean a workstation that was not connected to the DoS network, and it just referred to a 
normal computer workstation. BOSWELL was unsure if CLINTON ever used a workstation at DoS, and 
did not recall ever seeing a workstation in her office. 


envelope. 


A copy of the original interview notes and the referenced memo are attached in a 1A 
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(U//F OUO ) On June 15, 2016, LEWIS LUKENS, Date of Birth[ 
interview ed by Federal Bureau of Investigation (FBI) Special Agentsj_ 


at his residence. 


I was 


and, 


San Francisco, CA After being advised of the identities of 


the interviewing agents, and the purpose of the interview, LUKENS provided the following information: 


b6 
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(U/ / F OUQ ) LUKENS is currently the Diplomat in Residence for the Pacific Northwest region of 
the US, for the US Department of State (DOS). LUKENS, a career DOS employee, was most recently the 
US Ambassador to Senegal, before which he was the Deputy Assistant Secretary of State for the 
Executive Secretariat. As the Deputy Assistant Secretary, from the summer of 2008 until June of 2011, 
LUKENS reported to the Executive Secretariat, who was initially DAN SMITH until he was succeeded 
by STEPHEN MULL. LUKENS was responsible for providing operational and logistical support to 
approximately 800 individuals at the DOS, which included the Secretary of State, senior leadership and 
their staff. LUKENS responsibilities were broken into five main areas: Human Resources, Budget, 
General Services, Diplomatic Security (DS), and Information Resource Management (S/ES - IRM). 

(U// F0U6 ) S/ES - IRM was responsible for ensuring that the senior leadership of DOS had the 
Information Technology (IT) tools and systems they needed to do their jobs. The group was led by JOHN 
BENTEL and was comprised of approximately 25 to 30 individuals who were a mix of DOS personnel 
and contractors. LUKENS interacted with BENTEL on a daily basis. He described BENTAL as having 
“decent [technical] skills” despite not being a “tech guy” and added that he was more technically 
proficient than LUKENS was. LUKENS was not aware of the statements that had been attributed to 
BENTEL in the recent OIG report, but thought they were out of character for BENTEL. 

(U/ /TOUO ) LUKENS worked with CHERYL MILLS and HUMA ABEDIN before and during 
HILLARY CLINTON's transition to DOS to coordinate CLINTON's office space and human resource 
needs. LUKENS explained that the previous Secretary only had one Deputy Secretary but CLINTON 
planned to have two Deputies, so LUKENS had to reorganize the offices on the 7 ,h floor to accommodate 
the second Deputy. LUKENS worked with DAN SMITH and Under Secretary PATRICK KENNEDY at 
DOS to ensure that CLINTON's needs were met during the transition. LUKENS stated there was not a 
computer in CLINTON 1 s office at DOS because CONDOLEEZZA RICE did not have one, and one was 
not installed for CLINTON. 


(U// F0U 6) LUKENS and representatives from DS and S/ES-IRM visited CLINTON'S residence 
in Washington, DC during the transition to assess what equipment was present and what needed to be 
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installed. LUKENS provided that both secure and unsecure telephone and facsimile systems were 
installed at the residence. LUKENS did not recall if there was a computer in the Washington residence 
LUKENS did not visit CLINTON's residence in Chappaqua, NY and instead sent_ 


in his place. LUKENS was not aware of what equipment was ins talled in 
Chappaqua. LUKENS sta ted that the PS rep resentative for these visits was mostly likely_ 

l in 
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who was later replaced by 


the summer of 2009. 


(LJ// FOUO ) LUKENS was shown an email w th the subject “St ate Department Telephone Services 
at Secretary Clinton's Residence” that was sent from | to LUKENS and ABEDIN on 

January 27, 2009. After reviewing the email, LUKENS explained that “IST/Red Switch” refers to the 
direct phones to the White House, “Business Lines” refers to unclassified phone lines, and “Ops 
Dedicated Drop” refers to a phone line that connected directly to the DOS operations center. LUKENS 
was not sure what “CMS VoIP” referred to but thought it was related to DOS Crisis Management 
Support. LUKENS n oted that equipment was installed both in a SC1F and in an office area located near 
I LUKENS stated that he oversaw the installation of the telephone lines in a very 
broad sense but the actual work was very technical and beyond his expertise. 


(UZ/fOttO) ! _ ^ _ 

equipment. LUKENS describe d" l as likeable but noted that he often interacted directly with 
CLINTON'S staff and did not always keep his chain of command informed of requests from, and work 
begin done for, CLINTON and her team. 
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(U// FOUO ) LUKEN S was s hown an em ail with the subject “ Se cretary Residential Instal lation 
Hotwash” that was sent from I T to BENTEL j 


and 


on March 


17, 2009. LUKENS was not immediately familiar with the email or the attachment but believed that 
“Server: Basement Telephone Closet” referred to a telephone server. LUKENS noted the installation 
processes was unique because there was pre-existing equipment in the residences that had previously been 
installed for President WILLIAM CLINTON. 


b6 
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(U/ /EOU Q) LUKENS was not aware that CLINTON was using a private email server until it was 
released in the papers. Upon learning about the server, LUKENS had some general concerns about how 
the server had been protected from hackers. LUKENS did not know if the setup was a violation of any 
existing DOS policy at that time. LUKENS never had any conversations with CLINTON's staff or other 
department officials about the server. 

(U//F QU 0) LUKENS was shown an email with the subject “HRC blackberry” that was sent from 
MONICA HANLEY to ABEDIN on August 30, 2011. After reviewing the email, LUKENS provided that 
he was unaware of the email and that BENTEL never relayed any information to him about the server or 
it being nonfunctional. 

(U//FOUO) LUKENS was shown an email with the subject “S Communications” that was sent 
from ABEDIN to MULL on August 30, 2011. LUKENS was familiar with the email and provided the 
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context that the technology at DOS was not very user friendly and that matters were further complicated 
because CLINTON was not very technology savvy and had little patience for technology issues. 

(U//F QUO ) LUKENS was shown an email with the subject “Re: Series of questions” that he sent 
to KENNEDY on January 24, 2009. LUKENS was familiar with the email and explained that CLINTON 
could not have her BlackBerry in the SC1F so his idea was to set up a living room area outside of the 
SCIF where CLINTON could check her emails on her BlackBerry. CLINTON did not have a computer in 
her office and did not want one because she preferred to use her BlackBerry' for checking her emails. 
While DOS users can check personal email accounts via the unclassified DOS computer systems the 
proposed stand alone 1 system would have streamlined the process for CLINTON and would have been 
similar to the setup used by former Secretary of State COLIN POWELL. 

(U// F0U 6) LUKENS was aware that no DOS email account was assigned to CLINTON, aside 
from a generic account that was used for sending mass emails to DOS employees on behalf of the 
Secretary. LUKENS was not aware that CLINTON was using a personal email for official business. He 
was told by MILLS that CLINTON was using her personal account to keep in touch with friends and 
family. LUKENS did not email with CLINTON directly and typically communicated with ABEDIN, who 
he described as CLINTON’s gatekeeper. 

(U//FOU©) LUKENS was shown an email with the subject “Re: E-mail test” that was sent from 

HUMA to “H” on February 27, 2010. LUKENS was unaware of the issues discussed in the email _ 

exchange at that time, but he had since seen the email exchange. LUKENS stated that l 

~] who worked in BENTEL’s group 

(U//F0t/6) LUKENS was shown an email with the subject “Re: S berry” that was sent from 
HANLEY to ABEDIN oh August 30, 2011, After reviewing the email LUKENS provided that he had not 
seen the email before and did not know the circumstances in which it was sent. LUKENS did not know 
why BENTEL made the statement regarding FOIA searches in the email. 

(U// FOUO ) LUKENS had heard of the State Messaging and Archive Retrieval Toolset (SMART) 
but was not aware of any specifics about the program. LUKENS believed that SMART had been rolled 
out to all departments at DOS and was not aware that it wasn't used by S/ES - IRM. 

(U//FOUO) Once CLINTON'S transition to DOS was completed LUKENS' primary responsibility 
became coordinating the travel logistics for CLINTON and her team. This included handling matters 
related to passports, customs / immigration requirements, baggage, and hotel arrangements. LUKENS 
travel on all of the trips with CLINTON. 

(U//F0UO) LUKENS was shown an email with the subject “Communications Guidance for 
Moscow” the he sent to several individuals on CLINTON's staff on March 15, 2010. LUKENS did not 
recall receiving country specific threat briefs prior to each trip. However, LUKENS recounted that on one 
trip to Russia they received guidance from the Embassy that they should leave their phones on the plane. 
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However, this conflicted with the guidance from DS so they ultimately elected to take their phones off of 
the plane. LUKENS explained that the one.state.gov system referenced in the email was used for 
accessing the DOS OpenNet system remotely using a user specific pin and token. 

(U//E OUO ) A copy of the original interview notes and referenced documents are attached in a IA 
envelope. 
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(U/ /FOUO ) On April 5, 2016, HUMA ABEDIN. DOb[ 


Bureau of Investigation (FBI) Special Agents) 

__— r\cc. — <<tn c*_* xmi; 


and 


was intej viewed by Federal 
at the FBI 


Washington Field Office, 601 4 Street NW, Washington DC. Present for the interview was ABEDIN's 
counsel, MIGUEL RODRIGUEZ. Partner at B ryan Cave LLP, KAREN DUNN, Partner at Boies, Schiller 


& Flexner LLP and 


was FBI Section Chief Peter Strzok, as well asf 
District of Virginia, and David Laufman,j_ 


Associate at Boies, Sc hiller & Flexner LLP. Also present 


Jand£ 


Assistant U .S. Attorney - Eastern 
from the Department of 


Justice (Do JI Counterinte licence and Export Control Section. Prior to the interview RODRIGUEZ, 

DUNN and|_|agreed to sign a non-disclosure agreement in anticipation of viewing classified 

documents during the interview. After being advised of the identities of the interviewing agents, and the 
purpose of the interview ABEDIN provided the following information: 
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(U// F - OFJO ) ABEDIN first met HILLARY R CLINTON in 1996 when she was an intern in the 
Office of the First Lady. She then worked on CLINTON'S Senate campaign and her 2008 Presidential 
campaign, as the traveling Chief of Staff. When CLINTON became the Secretary of State, at the 
Department of State (DoS), ABEDIN became her Deputy Chief of Staff for Operations where she was 
primarily responsible for coordinating logistics for CLINTON. ABEDIN worked with JAKE 
SULLIVAN, CHERYL MILLS, JOE M ACM ANUS, as well as three Special Assistants, a Scheduler, and 
a Personal Assistant while she was in the Office of the Secretary. 


Transition to Department of State 

(U// F - QUO ) ABEDIN and CLINTON met with DoS on a few occasions prior to CLINTON being 
sworn into office to discuss her transition During these instances CLINTON and ABEDIN met with 
Secretary Rice and her staff to discuss the logistics of the transition. ABEDIN worked with PATRICK 
KENNEDY and MILLS to fill the available spots on CLINTON'S staff. ABEDIN was directly 
responsible for identifying and interviewing individuals for the roles of Personal Assistant, Scheduler and 
Personal Correspondent. 


(U//F0U6) ABEDIN provided that KENNEDY was their main point of con 


CLINTON’S office and that LEWIS LUKENS, MACMANUS and[ 


act for setting up 
were responsible for 

coordinating the technical aspects of the transition. ABEDIN did not know that CLINTON had a private 
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server until about a year and a half ago when it became public knowledge and did not recall any 
discussion about it during the transition. ABEDIN did not recall any discussions during the transition 
about whether using a private email account for DoS business was permissible. However, she did recall 
that they were advised that they could not have personal emails linked to a DoS device. As a result 
CLINTON elected to use a personal device only because she did not want to carry two devices. 

(U//F0UO) ABEDIN had never held a security clearance prior to working at DoS. She received a 
Top Secret security clearance at DoS but did not remember being read into any Special Access Programs 
(SAPs) or compartments. When ABEDIN was on boarded at DoS she received a security briefing that 
detailed the different levels of classified information and the proper handling procedures. ABEDIN did 
not recall ever receiving any training on the preservation of federal records but noted that she took a lot of 
training courses when she on boarded so she may have had training on the topic. ABEDIN provided that 
she was not an Original Classification Authority (OCA) at DoS 

ABEDIN’s Devices and Communication Practices 

(U//FOUO) ABEDIN's office was located in a Sensitive Compartmented Information Facility 
(SCIF) at DoS. At her desk she had both an unclassified and classified computer system. ABEDIN was 
not sure if the classified computer system was a Secret or Top Secret (TS) system, and she was unfamiliar 
with the term JWICS. ABEDIN did not receive any formal guidance on what system she should use for 
the different aspects of her work. She did the majority of her work on the unclassified system and would 
often go several days, or weeks, at a time without logging into her classified system. She would only use 
the classified system if she was notified that somebody had sent her a message on that system. In addition 
to the computer systems, ABEDIN had an open line phone and a yellow TS Cisco phone that she typically 
used for talking with the National Security Council. 


(U// FOUO ) ABEDIN provided that she was issued an official DoS email account, 
abedinh@state.gov, which she used for DoS related work. She also had an email account that was 
provided by CLINTON, huma@clintonemail.com, which she used for matters related to CLINTON'S 
personal affairs and to commu nicate with CLINTON'S pers onal staff and friends. ABEDIN also had a 
personal Yahoo email account, !" I ABEDIN could access her clintonemail.com 

account and her Yahoo account via the internet on the unclassified DoS computer system. She would use 
these accounts if her DoS account was down or if she needed to print an email or document. ABEDIN 


further explained that it was difficult to print from the DoS system so she routinely forwarded emails to 
her non-DoS accounts so she could more easily print. ABEDIN al so had another email account that she 
had previously used to support her husband's campaign activities,! 
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(U//FOU0) ABEDIN had no knowledge of her accounts ever being targeted by hackers and was 
not aware of any intrusion attempts. ABEDIN recalled that some people at DoS had issues with their 
Gmail accounts but she never had a Gmail account. 
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(U//FOUO) ABEDIN was shown an email dated September 1, 2011, with the subject “Fwd: 
Calls”, which she forwarded from her huma@clintonemail.com account to her DoS email account. 
ABEDIN did not recall the specific email or why she would have forwarded it. However, she noted that 
based on the date stamp she knew that she was not in the office when it occurred. 


(U//FOU©) ABEDIN was shown an email dated Oct ober 4, 2009, w ith the subject “Fwd: U S. 

and then forwarded to her 


interest in Pak Paper 10-04”, which ABEDIN received from[ 


Yahoo email account ABEDIN was not familiar with the document but was not surprised that she 
forwarded it to her Yahoo account. She explained that she routinely forwarded emails from her state.gov 
account to either her clintonemail.com or her yahoo.com account so that she could print them. ABEDIN 
stated th at she would typically print the documents without reading them. At the time of the email, 

worked for RICHARD HOLBROOKE who was the Special Representative for Afghanistan and 


Pakistan (SRAP). ABEDIN was unaware of the classification of the document and stated that she did not 
make judgments on the classification of material that she received. Instead, she relied on the sender to 
make that assessment and to properly mark and transmit the document. 
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(U//F0UO) ABEDIN was shown an email chain dated August 16, 2010, with the subject “Re: 
your yahoo acct”. ABEDIN did not recall the email and provided that despite the content of th e email she 
was not sure that her email accou nt had ever been co mpromised. She further provided that the ! I 


referenced in the email referred to 


an older campaign volunteer in Westchester, NY. 
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(U//FOUO) ABEDIN was provided with a DoS Blackberry and believed that all of CLINTON's 
top aides at DoS were issued Blackberries as well. The team would sometime use secure cell phones when 
they were traveling but they were not used on every trip Secure phones were only used when traveling in 
hostile operational environments. The s ecure phones were maintained by Diplomatic Security (DS) and 
would be provided to the team bv l I ABEDIN provided that DS routinely provided country specific 
security briefings prior to international trips. During these briefings the team would receive instructions 
on how to handle their communications once in country. For example the team might be told to leave their 
phones on the plane or to take the batteries out of their phones ABEDIN noted that the guidance changed 
based on the specific location and that it wasn't uncommon to receive different instructions on separate 
trips to a given country. For example, the communication plan for Moscow could be different than the 
plan in St. Petersburg. 


(U// FOUO ) ABEDIN was shown an email chain dated October 6, 2009, with the subject “IT 
security in Moscow” and an email chain dated October 12, 2009, with the subject “Re: Communications”. 
ABEDIN stated that the content of these emails was typical of the guidance that was provided by DS prior 
to a trip and that the instructions were closely followed by the traveling team. If CLINTON was not able 
to attend the DS briefing prior to the team's departure she would be briefed by DS on the plane. ABEDIN 
stated that they used computers that were set up and controlled by the Mobile Communications Team to 
access their DoS and personal emails accounts when they were in Russia 
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(U//FOUO) ABEDIN did not recall any potential security issues occurring while the team was 
traveling overseas aside from one instance in Egypt. Prior to a meeting at President Mubarak 1 s residence, 
the team was unexpectedly asked to leave their phones. ABEDIN could not provide any more details on 
what had occurred but noted that DS was with the team and was aware of the incident. 


The Secretary's Devices and Practices 


(U//FOUO) CLINTON's office at DoS was located in a SCIF on the seventh floor that was 
commonly referred to as Mahogany Row. Her office had an unclassified telephone and a TS Cisco phone 
for contacting other agencies. Initially, she also had a secure white phone' and a STE in her office but 
they were later removed. CLINTON did not have a computer in her office and conducted the majority of 
her work in person or on paper. ABEDIN explained that CLINTON could not use a computer and that she 
primarily used her Blackberry or iPad for checking emails. If CLINTON needed to check her emails 
during the course of the day she would leave the SCIF to check her Blackberry, often going to the eighth 
floor balcony. CLINTON'S email address was not widely known but all of her senior staff had the address 
and would share it with other government officials if they needed it. ABEDIN stated that CLINTON'S 
senior staff was not specifically instructed to filter her email but they understood what was relevant to 
CLINTON and would only share information with her as appropriate. 


(U//FOU6) ABEDIN was shown an email chain dated September 30, 2010, with the subject “Re: 
HbJ on moratorium”. After reviewing the email, ABEDIN could not recall the email exchange or the 
context of the email. ABEDIN stated that, in general, she would be told by either CLINTON or the 
requesting party if the call needed to be secure or not. It would be unusual for ABEDIN to read the 
content and then make her own judgment as to whether the call should be secure or not ABEDIN stated 
that she was likely with CLINTON when she sent the em ail and she was relaying g uidance from 
CLINTON. ABEDIN provided that! [andl 

CLINTON. - 


were assistants to 


(U//FOUO) ABEDIN was shown an email chain dated August 30, 201 I, with the subject “Re: S 
Communications”. ABEDIN recalled the email exchange and provided that CLINTON was not issued a 
DoS Blackberry and that she only used her personal Blackberry because she did not want to carry 
multiple devices. The email exchange occurred when CLINTON was in the Hamptons and was having 
communication issues following Hurricane Irene At that time, ABEDIN felt that it did not make sense to 
temporarily issue CLINTON a DoS Blackberry because it would require significant effort to transfer all 
of her emails and contacts to a device that she would only use for a few days. ABEDIN did not know 
what STEPHEN MULL meant when he wrote that the account could be set up to mask CLINTON's 
identity. ABEDIN's counsel noted that a longer version of this email chain had been released via the 
FOIA process (DoS case F-2015-12685, document C0590567 I). 

(U// FOUO ) ABEDIN was shown a memorandum from DS regarding the use of Blackberries in 
Mahogany Row. ABEDIN recalled seeing the memorandum in the news recently but did not recall when 
it was originally released. ABEDIN stated that she did not need her Blackberry when she was in the SCIF 
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so she was not affected by the recommendations in the memorandum. ABEDIN did not remember 
receiving a specific briefing from DS on Blackberry vulnerabilities but stated that it was possible that she 
received one because DS frequently briefed CLINTON's team on security topics. 


(U//FOUO) CLINTON did not have a secure Blackberry and ABEDIN did not know if secure 
Blackberries were even available at that time. ABEDIN stated that CLINTON had several different 
standard Blackberry phones during her tenure. It wasn't uncommon for CLINTON to use a new 
Blackberry for a few days and then immediately switch it out for an older version that she was more 
familiar with. The phones were typically purc hased by somebody on her staff and would be activated by 
“whoever was around”. ABEDIN recalled that ! l and MONICA HANLEY helped to 

setup new Blackberries on different occasions. ABEDIN did not know what was done with the old 
Blackberries after CLINTON transitioned to a new one. ABEDIN was shown an email chain dated April 
15, 2009, with the subject “Re: Won't get to huma today”. ABE DIN did not recall why they were 
acti vating new SIM cards for CLINTON. ABEDIN provided that ] I fLAST NAME UNKNOWN] 
wa. 


i 


President Clinton's office that may have worked for JUSTIN COOPER. 
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(U//FOUO) ABEDIN confirmed that CLINTON's Blackberry phone number was 212 


She was not aware of C LINTON ever using a second cell phone and was not familiar with the phone 
number 202 ] | [It is noted that a 202 area code was err oneously us ed when ABEDIN was asked 

about the aforementioned telephone. The correct number is 2I2| While ABEDIN noted that it 


would be odd for CLINTON to have a D.C. area code, she ultimately stated that no part of the number 
was familiar to her]. 
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(U// FOU O - ) ABEDIN stated that CLINTON had at least one, or possibly two, iPads during her 
tenure. She believed that one of them might have been a gift. CLINTON used the iPad for reading news 
articles but AB EDIN rare ly saw CLINTON carrying or using the iPad. CLINTON was trained on how to 
use the iPad by ] \ while they were on traveling on a plane. ABEDIN stated that the iPad was 

briefly used to send and receive emails following Hurricane Irene when CLINTON's other email systems 
were down. Although this was only intended as a temporary solution, this capability may have remained 
after CLINTON's other systems were restored. ABEDIN noted that she was in Europe when Irene struck 
and that HANLEY was responsible for handling the communication issues following the storm. ABEDIN 
confirmed that CLINTON's email was also down for an extended period of time following Hurricane 
Sandy. However, ABEDIN was in New York City, with her infant child, at the time and was not sure 
what efforts were taken to restore or establish temporary email for CLINTON. ABEDIN was unaware of 
any email accounts, Apple IDs, or cloud storage accounts associated with the iPads. 


Email System During Tenure 

(U//FOU© - ) ABEDIN contacted COOPER about getting a Blackberry for CLINTON while 
CLINTON was still in the Senate. CLINTON then used the Blackberry when she transitioned to DoS. At 
that time, her primary email address was hrI5@att.blackberry.net. Shortly after CLINTON became the 
Secretary of State COOPER established the @clintonemail.com domain and CLINTON began using 
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hdr22@clintonemail.com as her primary email. The only other person at DoS to receive an email account 
on the domain was ABEDIN. Later in CLINTON'S tenure she changed her email address to 
hrodl7@clintonemail .com. ABEDIN wa s not familia r with the email address 
hrl5@mycingular.blackberry.net or with 


JSjgmail. 


com. 


(U// FOU Q) Initially COOPER was the primary point of contact for anything related to the setup 
and maintenance of the email system. ABEDIN was shown three separate email chains with COOPER 
regarding the operation of the server during CLINTON's tenure The first was sent on January 9, 2011 
and had the subject “Re:”, the second was sent January 10, 2011 and had the subject “Don't email hre 
anything sensitive. I can explain more in person” and the third was sent October 20 201 land had the 
subject “Re:”. ABEDIN provided that she did not recall any details surround these email exchanges but 
noted that she trusted COOPER to fix any issues with the server. She did not recall the system ever being 
hacked but assumed that she would have notified CLINTON of any current issues that they were 
experiencing. 
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(U//FOU0) ABEDIN was shown an email chain dated March 17, 2011 with the subject 
“Re:School”. Upon reviewing the email she provided that she was not familiar with the email or the 
topics discussed within it. ABEDIN noted that her email address was misspelled on the chain and 
therefore she would not have received the email However, she was not aware of the @ cl intonemail.com 
system ever being hacked. 


(U//T0U0) ABEDIN provided that BRYAN PAGLIANO had worked on the Information 
Technology (IT) team for CLINTON’S 2008 Presidential campaign and was hired at DoS after CLINTON 
took office. Thereafter, BRYAN PAGLIANO became the new point of contact for issues with the email 
system. ABEDIN did not specify when this occurred but stated that there was a transition period during 
which she would contact COOPER and he would direct her to contact PAGLIANO 


(U//FOUO) ABEDIN was shown an email chain dated December 24, 2012, with the subject “Fw: 
Thank You”. After reviewing the emails ABEDIN provided that she did not recognize the 
SMSGS@state.gov email address and was not aware of any other generic email accounts used by 
CLINTON for DoS wide email communications. 


(U//FOUO) ABEDIN was shown an email chain dated August 30, 2011, with the subject “Re: S 
berry”. ABEDIN stated that she did not like the SSHRC@state.gov email address because it was too 
obvious of an email address. She noted that the email appeared to be related to discussions that occurred 
when they were working to restore CLINTON's communications after Hurricane Irene. ABEDIN did not 
know who JOHN A. BENTAL was but assumed that he worked in the IT department at DoS. When asked 
about BENTAL's statement that SSHRC@state.gov would be subject to FOIA searches, ABEDIN stated 
that she always assumed that all of CLINTON's communications, regardless of the account, were subject 
to FOIA if they contained related material. ABEDIN did not recall ever having conversations with 
CLINTON, or any other staff members, about the Federal Records Act and preserving relevant emails. 
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ABEDIN provided that at the time, they believed relevant emails would be captured and preserved by 
DoS if any of the senders or recipients were using an official DoS email account. 


(U//FOUO) ABEDIN was shown an email chain dated December 16, 2010, with the subject “RE: 
mail from clintonemail”. ABEDIN recalled that there had been a problem with emails from the 
@clintonemail.com system being filtered out by the DoS email system, but she did not recall the specific 
email exchange. ABEDIN noted that it appeared that it was SULLIVAN's emails that were affected and 
that it would otherwise be uncommon for him to be involved in discussions about email issues. 


Email System Post Tenure 


(U//FOUO) Following CLINTON's tenure at DoS she established a personal office in New York 
City for the purpose of writing her book and pursing other interests. Several members of CL INTON'S 
staff from DoS joined CLINTON'S team in New York, They included: ABEDIN. HANLEYJ 


and[ 


][believed to bej_ 


CLINTON on a limited basis as consultants 


also continued to support 


(U/ / F QUO ) When CLINTON'S team was formed ] [ established temporary G mail 

accounts for members of the team using the naming convention hrco@email .com ] l had been 

CLINTON's l | at DoS and ABEDIN described him as being good with technology. He set 

up the email accounts for the team so that they would have something more formal than their personal 
emails accounts. 
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(U//FOUO) When CLINTON left DoS she stopped using the clintonemail.com system and started 
using hrcoffice.com to formalize her transition. During this same time period, an outside IT company, 
PLATTE RIVER NETWORKS (PRN), was hired to maintain C LINTON's email system ABEDIN stated 
that PRN was initially hired to manage President CLINTON and I I emails. It was 

then later decided that PRN should also manage CLINTON’s email as well. 


(U//FOUO) Once the hrcoffce.com syste m was established, CLI NTON's staff was provided email 
addresses on the new system ABEDI N stated that[~ 
up new accounts for CLINTON's staff E 


Outlook based email system ABEDIN did not know[ 


_.from PRN, assisted with setting 

lalso provided guidance on how to use the Microsoft 


or 


(U//FOUO) Prior to the transition to hrcoffice.com, ABEDIN was advised that the 
clintonemail.com system was “going away”. ABEDIN stated that she lost most of her old emails as a 
result of the transition. She had only accessed clintonemail.com through a web portal and did not have a 
method for archiving her old emails prior to the transition. ABEDIN did not know if the system 
administrator had archived the mailboxes before the system was taken down. 
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(U// FOUO ) ABEDIN remembered having discussions with HANLEY about creating an archive of 
CLINTON's emails. ABEDIN believed that the archive was placed on a laptop so that it could be 
referenced while CLINTON worked on her book. ABEDIN did not know that the laptop was sent to PRN, 
nor did she know what ultimately happened to the laptop. ABEDIN was not aware that a copy of the 
email archive may have been placed on a thumb drive. 

Review and Production of ABEDIN Emails 

(U//F0UO) ABEDIN provided that she learned that DoS was seeking her emails after she read 
about it in the newspaper. DoS wanted ABEDIN 1 s emails as part of an effort to ensure that DoS had a 
complete record of documents from CLINTON'S tenure. ABEDIN contacted DoS and confirmed that it 
was seeking her emails. She noted that DoS' prior attempts to contact her were unsuccessful because DoS 
had an old email account and an old mailing address on file. ABEDIN then turned over her laptop and 
Blackberry to her attorneys so that they could conduct the review. ABEDIN was not directly involved in 
the review and relied on the judgment of her attorneys. RODRIGUEZ and DUNN stated that they sought 
additional guidance from DoS on how the review should be conducted but they never received a response. 
RODRIGUEZ and DUNN therefore erred on the side of caution and opted to include anything that they 
were unsure about. It was also noted that ABEDIN had previously responded to a similar request from the 
Benghazi Committee. 

(U//F OUO ) ABEDIN was shown an email chain dated April 2, 2012, with the subject “May - 
Asia”. ABEDIN confirmed that the email was related to her activities while at DoS and that it would be 
considered a relevant record with respect to the DoS request. ABEDIN explained that this email was not 
produced by her team during the review because she did not have access to her clintonemaiI .com account 
when the review was conducted. RODRIGUEZ and DUNN stated that the request from DoS only sought 
records currently in ABEDIN 1 s possession so they did not contact PRN to request other relevant records. 

(U// FQUO ) ABEDIN was not involved in the review and production of CLINTON's email, in 
response to a similar request that CLINTON received from DoS ABEDIN stated that the review was 
conducted by CLINTON 1 s attorneys and that she was not consulted during the process. 

Private Residences 


(U/ /EOUO ) CLINTON'S residence in Washington, DC (Whitehaven) had a small office on the 
third floor that was converted to a SCIF by DoS. DoS removed the original door and replaced it with a 
metal door with a key code lock during the conversion. Inside the SCIF there was a desk where 
CLINTON worked and a computer, printer, facsimile machine and a television. DoS also installed a STE, 
a “yellow phone” and a video teleconference (VTC) system. ABEDIN provided that the door to the SCIF 


was not always locked and that ABEDIN, HANLEY and the 
access to the SCIF. 


had 
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(U//F0U9) CLINTON's residence in Chappaqua, NY, was also outfitted with a small SCIF that 
had the same equipment as the Whitehaven SCIF, less the television set. ABEDIN provided that 
CLINTON was the only person to use the SCIF and that she routinely used the Cisco telephone to make 
calls from Channaniia because the cellu lar coverage was not very good there. ABEDIN, HANLEY and 

all had access to the SCIF. 


(LJ//FOUO) CLINTON received diplomatic pouches each night that contained the briefing 
material for the next day's meetings. When CLINTON was in Washington, she would be given the pouch 
prior to leaving DoS. If the pouch was not ready when she left, or if she was in New York, the pouch 
would be delivered to her residence by DS The pouch would be received by the DS agent stationed at the 
house and would then be placed on a bench inside the residence In Whitehaven, the bench was located 
outside of CLINTON'S bedroom and in Chappaqua the bench was located near the main entrance. 
ABEDIN stated that it was less common for the diplomatic pouch to be delivered to Chappaqua because 
CLINTON would typically take the pouch with her when she was traveling. ABEDIN did not know if 
l ever received or transp orted the di plomatic pouch when it was delivered to the residence in 
Chappaqua. ABEDIN stated that | did not handle the diplomatic pouch at the Whitehaven 

residence because her shift ended before the pouch was delivered at 5PM. 
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(U// FOUQ ) CLINTON typically received the Presidential Daily Briefing (PDB) in person at the 
office. When she was not in the office the PDB would be delivered with the pouch or sent via secure 
facsimile. If the content was particularly sensitive she might be briefed in person by a CIA officer. 


(U// FOUO ) CLINTON would periodically receive both secure and unsecure facsimiles at her 
residence in Chappaqua. In order to receive a secure facsimile somebody would have to answer the phone 
and then w ait several minutes for the documents to arrive. Since it was a time consuming process, 

would sometimes assist CLINTON by answering or hanging up the facsimile system but he 


would lea ve the documents on the machine for CLINTON or her staff to collect. ABEDIN provided that 
would pick up documents from the non-secure facsimile machine, which was located in a 


separate part of the residence. ABEDIN stated that they had numerous issues with the secure facsimile 
system in the Whitehaven residence and that it was often quicker to have the documents couriered to the 
house from DoS. 
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(U//FOU0) ABEDIN was shown an email chain dated March 20, 2009, with the subject “Re: 
Tom orrow”. Aft er reviewing the email ABEDIN stated that she knew for a fact that there were times 


when 


assisted with the facsimile machine and may have collected documents from the secure 


facsimile machine for CLINTON ABEDIN stated that the intention was to have CLINTON do it herself, 
but she wasn't very tech savvy and wo uld get frust r ated with th e process. ABEDIN provided that the team 


would also occasionally email things tc£ 




to print for CLINTON. 
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CU/ /FOUO ) ABEDIN provided that when CLINTON needed to contact the President she would 

have_call the oval office to coordinate the meeting or call. ABEDIN believed that CLINTON 

had the President's email address but ABEDIN did not know what it was. ABEDIN noted that the 
President could only receive emails from approved addresses. She recounted that when CLINTON 
changed her primary email address they had to notify the White House so that CLINTON's emails would 
not be rejected by the server. ABEDIN was not sure how often CLINTON emailed the President. 

ABEDIN was shown an email chain dated June 28, 2012, with the subject “Re: Congratulations!” 
ABEDIN did not recognize the name of the sender Once informed that the sender's name is believed to 
be a pseudonym used by the President, ABEDIN exclaimed “How is this not classified?” ABEDIN then 
expressed her amazement at the President's use of a pseudonym and asked if she could have a copy of the 
email. ABEDIN provided that she did not go on the trip to St. Petersburg and noted that security protocols 
in St. Petersburg were not necessarily the same as they were in Moscow, where they were not allowed use 
to their Blackberries. 


(U// FOUO ) ABEDIN was shown an email chain dated January 8, 2011, with the subject “Re: AG 
points from l 1 After reviewing the email, ABEDIN provided that she vaguely recalled the email 
exchange and that the original email was sent in preparation for a call between the Attorney General and 
CLINTON. ABEDIN stated that she did not have concerns with the content because she was only a 
conveyor of the information and that she relied on the sender to properly mark any sensitive information. 
ABEDIN reiterated that she did not take it upon herself to question the sender's judgment on how a 
document should be marked. ABEDIN stated that people at DoS took the handling of classified 
information very seriously. She never had any concerns with how classified material was handled by 
individuals at DoS. Nor did she ever recall CLINTON expressing concerns over how classified 
information was handled. 


(U/ /F0U 6) ABEDIN first met SYDNEY BLUMENTHAL in 1996 when she was a junior staffer 
at the White House and BLUMENTHAL was a senior official. ABEDIN never worked directly with 
BLUMENTHAL but when CLINTON was in the Senate he would send emails for ABEDIN to pass to 
CLINTON. ABEDIN did not always forward the messages to CLINTON and BLUMENTHAL eventually 
stopped emailing ABEDIN when he realized this When ABEDIN was at DoS, CLINTON would 
sometimes send ABEDIN emails from BLUMENTHAL for her to print. ABEDIN provided that she did 
not read the content of the emails from BLUMENTHAL and had no knowledge of his sources. 

(U/ /FOUO ) ABEDIN provided that she was not involved in drafting talking points while at DoS. 
The authors of the talking points depended on the content and were the responsibility of the appropriate 
bureau. 


(U/ /FOUO ) ABEDIN was shown an email chain dated September 20, 2012, with the subject 
“Re:”. After reviewing the email ABEDIN stated that it was not common to stash the diplomatic pouch in 
the limousine but that it would have been secured by the DS or Secret Service (SS) agents that were with 
the car. ABEDIN noted that if they were in CLINTON 1 s car there would be two DS agents present and if 
they took President CLINTON's car there would be one DS agent and one SS agent. 
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fUZ /FOliOl A cop y of the original interview notes and the NDAs signed by RODRIGUEZ, 
DUNN and are enclosed in a IA envelope 
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(UZ/FOtJ O) On November 20, 20151 
interviewed at the ! 

Special Agents (SA) | l and_ 

interviewing agents, and the nature of the interview^ 
information: 


_date of birth|_| was 

by F ederal Bureau of Investigation (FBI) 
After bein g advised of the identity of the 
provided the following 


held the following positions: 


[joined the U.S. Department of State in 


and has 



(U// FQUO ) l I described the OpsCenter as the “eyes and ears” for the Secretary of 

State. The Ops Center is staffed 24 hours a day and constantly monitors reporting from Department of 
State cables, other government agencies and open source news outlets for information of interest to 
Department of State leadership The Ops Center is also responsible for coordinating communications 
between senior leadership and foreign dignitaries. As a Senior Watch Officer (SWO) J 
was the most senior person in the Ops Center and was responsible for overseeing the activities of the 
other personnel as they worked to identify and disseminate critical information to the Secretary of State 
and Department of State leadership 


Investigation on 11/20/2015 


Date dictated N/A 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency: it 
and its contents arc not to be distributed outside your agency. 
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(U//FOUO) There are approximately seven or eight individuals staffed in the Ops Center during a 
normal day shift. In addition to the SWO, there are the following positions: 
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• Watch Officer (WO) - The WO is typically a junior civil servant who is responsible for 
gathering important information and disseminating it to Department of State leadership as 
necessary. They are responsible for answering incoming calls, monitoring cable traffic and 
scheduling phone calls for senior Department of State personnel as necessary. 

• Emergency Action Officer (EAO) - The EAO is responsible for monitoring international 
hot spots and other current items of interest for the Department of State. They usually 
work with the Crisis Management Support team, which is collocated in the Ops Center. 

• Ops Specialist - The Ops Specialist primarily performs clerical work for personnel in the 
Ops Center. This may include sending and receiving facsimiles or arranging the logistics 
of meetings or calls for Department of State leadership 

• Consular Affairs Officer - The Consular Affairs Officer is responsible for addressing any 
matters relevant to standard consular duties at foreign U S. establishments. 

• Diplomatic Security (DS) Officer - The DS Officer is a liaison between the Ops Center 
and the U.S. establishments and Regional Security Officers abroad. 

• Swing Station - The swing station is an extra body that provides support to the SWO and 
the watch team as necessary. 

• Bureau of Intelligence and Research (INR) Representative - The INR Rep is responsible 
for acting on behalf of the INR and for liaising with the broader Intelligence Community as 
necessary. 

(U// FOU Q) When urgent information or breaking news, which requires the immediate attention 
of senior Department of State personnel, is identified during normal working hours, the Director of the 
Ops Center is notified by the SWO. The Director communicates the information up the chain of 
command as appropriate. If such information is identified afterhours, the SWO notifies the Deputy 
Assistant Secretary (DAS) directly. The DAS will then provide the SWO with guidance on how the 
information should be transmitted 


(U//FOUO) During 

Itenure as a SWO there were two different Directors for 

the Ops Center. 

kvas the Director for the maiority of 

time 

in the Ops Center, and upon 

[departure. 

|became the Director. 


(u//eowo£ 


did not recall ever emailing the Secret ary directly and had no 


knowledge of the Secretary's personal email account or private email server, 
recalled receiving a few emails from the Secretary, such as mass emails at the holidays, which she 


]only 
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presumed were sent from a Department of State email account. In instances where she needed to relay 
information to the Secretary she would send the information to the Secretary's Chief of Staff (CoS), or to 
HUMA ABEDIN. 
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(U//F0W©)[ 


]was shown a copy of the email that she sent on July 3, 2009, with 


the subject “Summary of 1055 E DT DPRK Conferenc e Call”, which was flagged by the ICIG as possibly 
containing classified information | [ recalled the events surrounding the email and 

provided that she was the SWO on duty that day and had been directed to convene a call for key 
Department of State officials to discuss the DPRK missile launches. The discussion was based on 
afterhours reporting from the Intelligence Community that was at least confidential if not classified. 

I I could not definitively recall what agency owned the s ource reporting but believed that 

it likely came from the Central Intelligence Agency. I | was o n the conference call for the 

purpose of taking notes but she was not an active participant in the discussion. I I could 

not recall if the call was on a secure line but noted that it was common for such calls to be held on 
unclassified phone lines because not all of the key participants would have access to a secure phone if 
they were at home or traveling. 


(U//F OUO) Following the call, 


Jwas responsible for summarizing the discussion 


in the referenced email and then forwarding it to individuals within the Department of State who needed 
to be aware of the situation. The email was sent on the uncla ssified system becau se not all of the intended 
recipients had immediate access to classified email accounts. T j noted that it was not 

uncommon for the Ops Center to send su ch emails on the unclassified system. The specific content of the 
email was based on| 


notes and her judgment on what should be included in the 


summary. There was no forma l review of the ema il, for either its content or for the presence of classified 
material, prior to it being sent. I I noted that the Deputy Executive Secretary was an 

Original Classification Authority (OCA) who would on occasion review material for the Ops Center. 

(U/ /FOUO ) The email recipients were based on an established call sheet that indicated who should 
receive reporting o n various topics. Also included were individuals added by the senior leadership. 

identified the email recipients on the above cited email and provided the following 
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information about their roles at that time: 
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♦ 


I was stationed in New York at the time. I 

could not recall her specific position but provided that she held a high ranking function 
within the United Nations. 


♦ 

♦ 
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3^ould not recall her 


specific position or title. 


were staffers for other bureaus within 


the Department of State. 


_Jreviewed the subsequent emails in the chain and noted that 

Jwas the SWO on duty on July 4 i h . Based on the tim e difference between when the 
conference call occurred and when the emails were sent. I I b elieved that there ma y have 


been another SWO, or two, on duty between her shift and| 


Jshift. 


could 

not recall who relieved her at the end of her shift but stated that she would have briefed the incoming 
SWO on the conference call and any necessary follow up items that the incoming SWO would need to 
address during their shift. 


(U//F QUQ ) | I provided that the Ops Center maintains a Watch Log where the 

details of any call arranged by the Ops Center are recorded The log contains basic information about the 
call to include the date, time, participants, and in some cases a brief synopsis of the subject of the call. 

The Ops Center will log any calls that are facilitated by the Ops Center, which involve the Secretary of 
State, or any Deputy Secretaries, Under Secretaries, Assistant Secretaries, or foreign dignitaries. The Ops 
Center does not maintain a log for emails sent to, or from, the Ops Center. 
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(U/ /FOUO) 


was amenable to recontact if necessary. 
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(U/ ffOUO ) Agent notes are included in an attached 1 A. 
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(U// FOUO ) On May 28, 2016, CHERYL MILLS, date of birthl 


interviewed by Federal Bureau of Investigation (FBI) Special Agent (SA)[ 


was 


and SA 


at the law offices of Wilkinson Walsh + Eskovitz, 1900 M Street NW, Suite 800, 
Washington, DC. Present for the interview was SAMUELSON's counsel, Beth Wilkinson, Partner, 
Alexandra Walsh, Partner and Hal Brewster , As sociate. Also pr esent was FBI Section Chief Peter Strzok, 
as well as David Laufman J l and l I from the Department of Justice (DoJ) 

Counterintelligence and Export Control Section. After being advised of the identities of the interviewing 
agents and the purpose of the interview, MILLS provided the following information: 
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(U//FOUO) Immediately after completing her service at the United States Department of State 
(State) in 2013, MILLS became personal counsel for HILLARY CLINTON. HEATHER SAMUELSON 
joined MILLS' firm, located in Chevy Chase, MD, sometime in 2014. 


Transition to Platte River Networks Server 


(U//F6W©) When the respective offices of WILLIAM and HILLARY CLINTON began a search 
for a company to operate and maintain an email server, the CLINTON's financial manager recommended 
as a technology broker. There were no security concerns with the CLINTON's then- 


current email server operated by BRYAN PAGLIANO (Pagliano server). The CLINTON's wanted an 
outsourced company accountable for the oper ation of t he server. MILLS coordinated the needs for the 
serve r by prov iding non-technical guidance to | which was focused on the end user experience. 

After ! [ identified several companies as options, the Office of President CLINTON reviewed the 

recommendations and selected Platte River Networks (PRN). After PRN was selected to procure, 
operate, and maintain the server (PRN server), MILLS negotiated the final cost and addressed privacy 
concerns with PRN. Throughout the negotiation process, MILLS consulted with PAGLIANO to ensure 
the recommendations of PRN would meet the end user experience guidance she had provided to PRN. 
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(U//F 6U0 ) When PRN completed the transition from the Pagliano server, MILLS did not know 
if PRN transferred any email to the PRN Server. Additionally, MILLS did not know what PRN planned 
to do with the Pagliano server after the transition was complete 


Investigation on 5/28/2016 _at 

File # 502_ 


B\ $A 


SA 


Wasluncion, DC 


Date dictated N/A 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency: it 
and its contents arc not to be distributed outside your agency. 
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Department of State Request 


(U//FOUO) In the Summer of 2014, State was in the process of producing materials for the House 



and some other State personnel MILLS understood the issue to be that State's computer systems taped 
over backup records after a period of time for all users not on the seventh floor and some users on the 
seventh floor. MILLS suggested to State they search State systems for CLINTON 1 s clintonemail.com 
address, while State requested MILLS produce CLINTON'S email. State provided no initial deadline in 
the first meeting and followed up with a letter documenting the request. MILLS understood State's 
request to be in relation to the Benghazi Committee and not a Freedom of Information Act (FOIA) 
request. 

(U//Feee) CLINTON asked MILLS and DAVID KENDALL to oversee the process of 
providin g State CLINTON's emails from her tenure as Secretary of State. As the process was developed, 
Jadvised MILLS it was CLIN fCN or MILLS' obligation to filter out personal emails from what 


was provided to St* it 4ddijiorally; if State received all CLINTON's emails involving gov accounts. 
State would not filter out personal emails. 
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Collection of Relevant Email 


(U//F0U**) Late in tire Summer of 2014, MILLS contacted 


at PRN and 


requeste d all CLINTO N s email involving a .gov account from her tenure as Secretary of State. MILLS 
believed 


^ - ^ ^ - -- J - - 

_Js*tancn iVvgov email encompassed email headers, the body of emails, and a ny 


forwarded emails. She was not aware of which mailboxes or other potential locations! 
searched for email responsive to her request. However, MILLS did not believe l 


was asked 

to search or searched HUMA ABEDIN's clint onemail.com ac count. After preparing a pst file of the .gov 
emails (July Export) based on MILLS' request. ! ~"l discussed differ ent options on the transfer 


of the July Export with M ILLS, to include shipping DVDs, but[ 
remote transfer. Based or | 
containing the July Export. 


recommended a secure 


advice, MILLS neither requested nor received DVDs 


(U//F0 U6) After deci ding on the remote transfer. 


which provided! 


provided MILLS with a link 


_| remote access to MI LLS' computer MILLS clicked on the initial link, 

then click ed an additiona l acknowledgement giving b ermission to remotely access her 

computer. 


then transferred the July Export t o MILLS' compu ter and imported it into 


Outlook. Once the process was complete, MILLS re voked! 


session was terminated. MILLS did not know where; 


E 


permission and the remote 


saved the pst file on her computer or 


if it was encrypted, however, MILLS did recall the .pst file was password protected. Sometime after 
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MILLS received the transfer, HEATHER SAMUELSON received a similar transfer from PRN. MILLS 
never made copies of the .pst file or transferred it to external media. 

(U/ / E QUO) MILLS' Dell laptop (Dell) was the computer that received the transfer described 
above. The Dell was primarily used for work, but was sometimes used for personal reasons. It was 
connected to the Internet and had up-to-date antivirus software installed The Dell was not wiped, other 
than PRN actions described later, or reset to a factory state MILLS continued to use the Dell until it was 
turned over to her attorney BETH WILKINSON The Dell is currently in WILKINSON's possession. 


(U//E OU O) Shortly after SAMUELSON began reviewing the July Export from PRN, she noticed 
there was no email from app roximately Jan uary 2009 - March 20 09 in the data p rovided by PRN. 

MILLS likely reached out to | [ regarding this matter. I h old MILLS PRN did not 

have any email for CLINTON from the timeframe in question. Since CLINTON was using AT&T for 
BlackBerry service during that time, MILLS recalled learning AT&T did not keep email records, but did 
not recall when she became aware of that fact. MILLS did not contact any other email service providers, 
such as Gmail, because she did not have knowledge of CLINTON using another email service. 
Additionally, MILLS did not recall attempting to access an Apple server that was once in operation at the 
CLINTON residence in Chappaqua, NY. 


(U//EOU Q) After review ing a document dated July 28, 2014 referencing a conference call 
between MILLS,! 


and PAGLIANO regarding archived email options, MILLS stated she did 


not recall the specific conver sation. Other t han the conversation described above, MILLS did not recall 


any other conversations with 
accounts. 


about the request for CLINTON's email involving .gov 


(U// FOUO ) After S AMUELSON b egan the review of the July Export, but before her review was 
complete, MILLS contacted f l and requested a .pst file containing all of CLINTON's email 

ry to review it for non gov work related email (September Export). MILLS did 
to search ABED1N's email and did not know which mailboxes or email 


from her te nure as Secret; 
not instruct 


addresses[ 


searched to produce the pst file responsive to her request. PRN remotely 


transferred the .pst file to SAMUELSON, however, MILLS did not recall if the .pst file was transferred to 
MILLS’ Dell. Other than the July Export and, possibly, the September Export, MILLS did not receive 
any other pst file tra nsfers from PR N. However, SAMUELSON, as the one conducting the review. 


sometime s contacted _ 
files from 


directly and received smaller transfers when she identified gaps in .pst 


MILLS never had direct access to CLINTON's mailbox on the PRN server. 


Cull and Review of Email 
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(U//F QH Q) The review methodology employed by SAMUELSON was developed by 
SAMUELSON, MILLS and KENDALL, but was executed by SAMUELSON. They did not consider 
using any commercially available e-discovery tools for the review and did not consult any individuals 
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who were not agents of Clinton during the review process. They also did not discuss how to handle 
potentially classified emails during the review because they had no reason to believe any classified 
material was contained in the emails. Additionally, no emails were identified as containing potentially 
classified or sensitive information, therefore, no emails were removed during the review process. 

(U/ri- OU O) The review process called for all email from CLINTON's tenure to be filtered for 
.gov email addresses, relevant keywords, and the names of government officials. The review took 
SAMUELSON several months and occurred at MILLS' office in Chevy Chase, MD. SAMUELSON 
used her own computer for the review and, as questions arose, SAUMELSON would print any email in 
question and ask for guidance from MILLS. Emails that contained a mix of work-related and personal 
content were treated as work related. Once the review was complete, SAMUELSON printed the 
approximately 30,000 work-related emails identified in the review. The printed copies were then provided 
to State in December 2014. SAMUELSON produced an electronic copy of the work-related emails which 
was later provided to KENDALL at Williams and Connolly. MILLS was not aware of who produced the 
electronic copy provided to the FBI or what the file was named. Other than emails where SAMUELSON 
requested MILLS' guidance, MILLS did not review the emails identified by SAMUELSON as work- 
related. 


(U// FOUQ ) MILLS was unsure if SAMUELSON encountered duplicate emails during her 
review. If she did, MILLS was not involved in any efforts to remove duplicates from the collection 
provided to State. Regarding ABEDIN's account on clintonemail.com, MILLS did not know why no 
email between ABEDIN's account and CLINTON'S account was part of the production to State. There 
was no distinction between the treatment of email to or from ABEDIN's clintonemail .com account and 
ABEDIN's state.gov account. 

(U//FOUO) After State began reviewing the emails printed by SAMUELSON, Stated advised 
MILLS when specific emails were determined to be classified and instructed her to delete the emails in 
her electronic copy, then empty her deleted items folder. 


(U// FOUO ) After reviewing an email dated November 24, 2 014 referencing an “urgent calf' with 


‘CESC,” MILLS stated she did not recall participating in a call with 


MILLS also did not 


recall SAMUELSON having trouble with her connection to the pst files in the same approximate 
timeframe. 


(U/ /POU O) MILLS recalled a discussion with PRN where PRN explained, because of the way 
Outlook functions, it displayed CLINTON's current email address instead of the email address CLINTON 
used at the time each email was transmitted. This issue was not resolved and no emails produced to State 
were altered. 


Deletion of Email 
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In late 2014 or early 2015, MILLS contacted 


and requested he remove 


all pst files from her computer She was unsure if she di scussed with P AGLIANO the software proposed 


by[ 


to effect the deletion. In January 2015, 


sent MILLS a link and, in a 


process similar to the fi le transfer process described above, took control of her computer in a remote 


session. 


|checked the computer for the requested files and removed them using software 
that permanent ly deleted the files. MILLS did not know if BleachB it was the softw are used by 
After he completed the process, MILLS looked with l 


to verify the files were 


deleted. MILLS did not discuss wiping or deleti on software wit h anyone who was not an agent of 


CLINTON at the time, nor did anyone other than 


remove files from her computer. 
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(U/ /FOUQ ) In December 2014 or January 2015, CLINTON decided she did not want to retain 
email bey ond a 30 or 60 day retention policy, to include access to any historical content. MILLS 
contacted f l and conveyed this change, but did not specifically instruct him to remove any pst 

files or archived mailboxes. 
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(U// FOUO ) In March 2015, after notifying PRN of obligations to preserve materials relevant to 
CLINTON's email, MILLS contacted PRN to determine if any backups of CLINTON's email existed 
and, if so, where those backups were located. After discussing the matter with PRN, she instructed PRN 
to visit the datacenter where the Pagliano server was housed and review it to confirm no records existed 
on the old system. PRN could not locate any backup data on the Pagliano server or any of the associated 
equipment, however, MILLS instructed PRN to maintain the equipment. MILLS was not aware of PRN 
deleting any data related to CLINTON's email in March 2015, nor did she request PRN delete any data, to 
include pst files or Datto backup files. Furthermore, MILLS did not instruct PRN to delete any data 
using BleachBit on March 31, 2015. 


MILLS had no knowledge regarding the following topics: 

At the time it was created, an email archive of CLINTON's email, including content from her 
tenure as Secretary of State, created by MONICA HANLEY. 

HANLEY providing the computer she created the archive on to_ 


in early 2014. 


returning the above computer containing the archive in 2014. 


Any transfer of clintonemail.com content to hrcoffice.com. 

CLINTON's access, or lack thereof, to her clintonemaiI.com content after CLINTON's 
hrcoffice.com email address was created. 

HUM A ABEDIN's method for accessing email. 

A master copy containing all of CLINTON's email from her tenure as Secretary of State. 
PRN email exports from September 2015. 
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(U//l''OUO) On Apri l 9. 2016. CHER YL MILLS, was interviewed by Special Agent {SAj 


and SA 


] inside the FBI Wasliinglon Field Office. 601 4 ,!l Street MW. 


Washington. DC 20535. Present for the interview were MILLS’ attorneys Beth Wilkinson. Alexandra M. 
Walsh, and llal Brewster from Wilkinson. Walsh & Eskovitz LLP. Also present was FBI Section Ch ief 


Peter P. Sir/.ok. as well as David Laufman.^ 


and 


Iron) 


the Department of Justice (DOJ). Prior to the interview. Wilkinson. Walsh, and Brewster agreed to sign a 
non-disclosure agreement in anticipation of viewing documents during the interview that were classified 
as part of a Special Access Program (SAP). 


(U-' /FOUO ) Prior to the interview, agents advised MILLS that while it was understood that the 
interview was being limited to the period of her Department of State (DoS) employment, the FBI believed 
it essential to the investigation to understand the sort process and the computers used in that process. 
Furthermore. MILLS was advised the FBI expected to continue the interview after the details were 
resolved by the attorneys. After being advised of the identities of the interviewing agents and the purpose 
of the interview. MILLS provided the following information: 


(UZ/PDlrt?) From 1992 to 1999. MILLS served in the While Mouse as Associate Counsel to the 
President. From 2002 to 2009. MILLS served as the Senior Vice President and General Counsel at New 
York University. MILLS also served as a consultant to HILLARY R. CLINTON'S 2008 Presidential 
Campaign. In 2009. MILLS transitioned with CLINTON from the campaign to the Department of Stale 
(DoS). Initially, from January 2009 until May 2009. MILLS served in a part-time capacity as Acting 
Chief of Staff. She converted to lull-time Chief of Staff'and Counselor tor Policy related to Food Security 
and Haiti thereafter. MILLS resigned from DoS in February 2013. 


(U// IOUO) 1 lUiYIA ABED IN and JACOB SULLIVAN were also part of CLINTON'S DoS 
executive staff. ABFDIN served as Deputy Chief of St aff for Operations and SULLIVAN served as 

L I was also assig ned to CLINTON'S executive staff'as 

| position was separate from that of the 


J 
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If 'VPOH0) MILLS held a l op Secret/Sensilive ('omparlmenled Information (SCI) clearance 
while ai DoS. Mll.I.S believed she likely had security training from Diplomatic Security (DS) upon 
receiving her clearance, bill didn’t recall any specific training. MILLS was not aware, nor was she ever 
told, she was a DoS original classification authority. 

(UWOUO) MILLS did not recall receiving any specific training or guidance concerning federal 
Records retention policy or procedure during her DoS tenure, but explained it could have happened. 

(I 1//POIJO) MILLS' unclassified DoS email account was Mills(.'l)'<*'slatc.gov . This account was 
linked to her DoS issued Blackberry and eould also be accessed from her unclassified DoS computer or 
remotely via a lob system. MILLS further stated that the DoS fph system wa s not always reliable, and 

sometimes “went down." Mll.I.S maintained a Gmail account.|_ |« unrail.com . that she would 

use when she could not access her DoS unclassified account. Said Gmail account was the only personal 
account used by MILLS during her DoS tenure. 

(U//POU0-) MILLS was able to switch over to a classified network in her DoS office. She was 
unsure as to what level of classification said network could handle, but knew that it eould at least handle 
material declared as Secret. 


(U/tf OU B) When MILLS needed to review Top Secret materials, information was provided to her 
in person and taken away after she reviewed the materials. MILLS was not familiar with the JWIC'S 
s\ stem, and was not sure who ma\ have had a JWJCS account at DoS. 


(U//Pf )U0 ) MILLS was asked to review an email dated 6/4/2011 and with the subject line 
"Google email hacking and woeful slate of civilian technology." In response to the email. MILLS stated 
she did not recall the email, but the content was not unfamiliar to her. MILLS remembered hearing that 
hackers may have been targeting Gmail accounts, and further recalled somebody sumic stine her account 
may have been la rained, but she was unsure of who provided her with this information 


the originator of said email, traveled a lot and had frequent difficulties signing into the 


DoS network, so it was common for her to use personal email. 


(U// T O UO) Agents asked MILLS to review a DoS cable dated 6/28/20! 1 with the subject line 
"Securing Personal li-mail Accounts." MILLS did not recall the cable, bin stated that it was probably 
connected to the 6/4/2011 email she previously reviewed. Mll.I.S did not believe the referenced cable 
resulted in a ■perfect" change of behavior in regards to the use of personal email accounts by DoS 
employees. 


(U// TOUO ) MILLS was asked to review an email dated 7/22/2011 with the subject line "Draft 
High-Level Narrative and Work Plan [Note Use of Personal/Gmail |." MILLS slated she "did not recall 
vvluii she meant by (writing) 'Note Use of Persona I/Gmail.*** in the subject line. 
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(U//I OUO) 1'hc only mobile DoS device MILLS was issued was a Blackberry'. Most, but not all. 
people at DoS were assigned a Blackberry. MILLS was not assigned a mobile secure phone, but she was 
able to check one out from the DoS communication team if/when needed. 

(U//1WO) MILLS did not travel with CLINTON as often as ABEDIN and/or SULLIVAN. 
MILLS only traveled with CLINTON on occasion when she visited Caribbean. African, or South 
American countries. When CLINTON traveled. MILLS ordinarily stayed back in Washington. DC. to 
manage DoS in her absence. MILLS recalled receiving travel briefings from DS prior to her DoS related 
travel. 


(U// FOU B) MILLS was involved with the team that helped CLINTON transition to DoS. MIL!,.S' 
role was to help CLIN TON identify the priorities she wanted to address as Secretary. MILLS also 
identified individuals lor CLINTON’S stall MILLS further saw her role as helping CLINTON "balance 
her life in regards to the transition." MILLS had no recollection of being involved with discussions 
concerning the structure of CLINTON'S Information Technology (IT) platform during or alter the 
transition. 

{U//HHJO) Agents asked MILLS to review two emails front February 2009 with the subject lines 
"Update" and "Recap - Meeting re:Blackberries." While MILLS did not recall the specific emails, she 
staled she recalled the issue the emails referenced. MILLS explained CLINTON used a Blackberry to 
communicate prior to coming to DoS. CLINTON was not computer savvy and thus was not accustomed 
to using a computer, so efforts were made to try to figure out a system that would allow CLINTON to 
operate as she did before DoS. CLINTON did not have a computer in her DoS office. MILLS recalled 
hearing that the National Security Agency (NSA) had secure Blackberry technology that would allow for 
the use of such devices in a SC1F. MILLS requested DoS communication and security personnel research 
the possibility of implementing said technology at DoS. Ultimately it was decided that although the 
technology existed, it was not feasible to implement the same technology at DoS. 

(U/ TOlft ?) When asked what her understanding was in regards to who the six proposed secure 
Blackberry users were at DoS. as referenced in the email. MILLS explained that the goal was to obtain the 
technology for CLINTON because she did not have a computer. MILLS was not aware of who else at 
DoS may have received a secure Blackberry had the technology been approved for use at DoS. 

(U// FOUU ) The executive suite at DoS was termed "Mahogany Row." because of the wood 
paneling throughout the space. Mahogany Row was a SCIF. so the use of Blackberries was not 
authorized. MILLS was not familiar with waivers issued to previous Secretaries of State, which allowed 
for use of Blackberries in a DoS SCIF. 

(U/ / F QU0 ) MILLS was asked to review a March 2009 DoS Memo with the subject line "Use of 
Blackberries in Mahogany Row." The memo, from ERIC J. BOSWELL, was addressed to MILLS. 

MILLS staled she "did mu recall the memo, but it was not unfamiliar." MILLS believed the memo was in 
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response to inquiries and discussions held early on in CLINTON’S DoS tenure concerning the possible use 
of Blackberries in sensitive DoS spaces. However. MILLS further explained that CLINTON and her 
executive staff did not use Blackberries on Mahogany Row because they were never authorized to do so. 

(U//KOUO) When CLINTON wanted to email, she would have to leave Mahogany Row to 
retrieve and use her Blackberry. When Cl.INTON was inside of DoS I icadquarters. most information 
was relayed to her face to face or on the phone. CLINTON also liked to receive and read a lot of 
information in paper documents, which is why she would often forward emails to her executive staff with 
instructions to print. MILLS was not aware of anyone other than CLINTON who had access to 
CLINTON’S email account. 

(U/WHW) MILLS was not aware of CLINTON ever being issued a DoS Blackberry, nor could 
she recall any official request made for CLINTON to receive one. Agents asked MILLS to review an 
email daled 8/30/2011 with the subject line “Communications.” After viewing the email. MILLS slated 
that she believed the exchange was in reference to conversations about communication issues during 
Hurricane Irene. MILLS recalled CLINTON’S email was down during that time. Agents asked MILLS 
what was meant in the email by discussing the creation of a DoS email account that could “mask her 
identity, hut which would also be subject to KOI A requests.” MILLS explained she assumed “masking 
her identity" was in reference to the ability to give CLINTON a pseudonym so her account was not 
obvious to outside parties. MILLS also explained she thought that the I-'OIA reference meant that 
CLINTON'S emails from the potential account would be subject to FOIA ifihe filing party knew the 
pseudonym. 

(U//POUO) Agents asked MILLS to review an email daled 1/24/2009 with the subject line “Series 
of Questions.” MILLS staled she recalled the context of the email. As MILLS previously mentioned. 
CLINTON did not know how to use a computer, so the suggestion of a stand alone computer for 
CUNTON was not an appropriate solution. 

UWrO UO ) CLINTON'S office was connected to MILLS’ office, so she would generally walk into 
CLINTON’S office to share information MILLS received from relevant emails. MILLS wanted to create 
the best llow ol'information to the Secretary possible. MILLS stated she had no general concerns on how 
DoS business was handled on unclassified systems. 

(li.'/ rOUO) When CLINTON first came to DoS, she was using an email account associated with 
her A f&T Blackberry ( h r 15 ■' ir a n. h I ac k berry .net ), and a few months later. CLIN TON transitioned over to 
the 'diclintoncmail domain. MILLS did not know why CLIN TON transitioned, hut was aware of the 
transition because she was notified of the change in CLINTON’S email address. MILLS further stated she 
was not aware of anyone at the time, from DoS or otherwise, who was responsible for the email transition. 

(H/.' I'OUO ) It was MILLS' practice to use her State.gov email when conducting DoS business. 
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(D//H OUO ) MILLS was not aware of any efforts to archive emails for federal records retention 
requirements or otherwise while she was tit DoS. MILLS may have had conversations with BRYAN 
PAGUANO concerning the Federal Records Act. but sh e was not sure. MILLS me t witli PAGUANO 

frequently. Mll.i.S did not recall any conversations with | I con a-mme _ 

Cl.lNTON's use of a private server and/or the Federal Records Act. Mll.i.S stated that 
name was familiar, but she did not recall any interactions she may have had with him. 

(U// FOUO) Mll.i.S recalled CLINTON using an iPad to review news articles. MILLS did not 
know if CLINTON used her iPad to email. Mll.i.S was not aware of how many iPatls CLINTON may 
have had during her DoS tenure. MILLS did not recall CLINTON using a “Hip phone." MILLS was on Is 
assure of one mobile phone number for C’LIN 1'ON. 

(LWLOI.IO) MILLS did not recall any temporary email accounts or phone numbers being set up 
for CLIN I ON during Hurricane Sandy. 

(U/ / I ODO ) Mll.i.S did not learn CLINTON svas using a private server until after CLINTON'S 
DoS tenure. Mll.i.S stated she svas not oven sure she knew what a server svas at the time. Mll.i.S had no 
insight as to who came up with the idea of using the private server, nor was she aware of who made the 
final decision to use said server. 1 lowever. MILLS believed the idea svas to "piggyback" on the already 
existing server being utilized by President WILLIAM J. CLINTON. MILLS staled that there may have 
been technical people at DoS who were asvare the Secretary svas using a private server, but MILLS svas 
only speculating. MILLS was not assure of any DoS procedures to appros-e the setup and use of a private 
server by CLINTON. 

(U/7F OU 0-) A13RD1N also had an account on the climonemaiI.com domain. MILLS wits mil sure 
svhy she svas not offered an account on the elintonemaiI.com domain, but stated that she was now "glad 
(she) did not have one.” 

(17/POUH) MILLS svas not familiar w ith the emai l address hr 1 jtralt.cinuulai'.net . MILLS also 
stated she svas "not assure of the email account |» umail.com while at DoS." 


(LV /LOt. Hj j It svas MILLS' belief that the front office at DoS had a strong understanding of the 
need to maintain federal records. Agents asked MILLS to review an email dated 12/11/2012 with the 
subject “Significant FOIA Report." After reviewing the email. MILLS stated she svas not sure if she svas 
involved in the FOIA request tiled by Citizens for Responsibility and Lillies in Washington (CRKW) as 
discussed in the email. MILLS further explained there was a large volume of FOIA requests while she 
svas at DoS. DoS Fxeculives were made asvare of significant FOIA requests, but it svas not typical for 
MILLS to respond to FOIA because "it svas not in her realm." MILLS also stated she "couldn't say who 
(at DoS) FOIA responses fell on." 
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(U//i : OUO) MIL.LS did not have knowledge of any backups or migrations of climoncmail.com 
accounts, nor was she aware of who might have knowledge of such events. MILLS was not aware of any 
emails being deleted or wiped from CLINTON’S private email server prior to CLINTON’ leaving DoS. 


(LWf OUO j Agents asked MILLS to review an email dated 10/13/2012 with the subject line "T his 
am Green on Blue." After reviewing the email. MIL LS slated she remembered the event, but not the 

specific email. MILLS did not know why[_|might have forwarded her the email in question, but 

assumed it was “because he wanted her to read it." MILLS also noted the email was s ent on a Saturday, so 
she was probably not in the office to receive the information directly from 1 Mil l S further 


staled she did not have any concerns over the classification of the content of the email, nor that it was sent 
via an unclassified email. 


{U//TOUO) Agents asked MILLS to review an email dated 2/20/201! with the subject line 
■ollow Lip to Davut oulu Call.” After reviewi ng the email, MILLS stated she did not recall the email, nor 


could she speak as to 


reason for drafting the e mail and send inu it to her. MILLS 


further explained if the media was interested in a story related to DoS. 
VIILLS regardless of the sensitivity. 


would have notified 


(l l/ /I’()UO) Agents asked MILLS to review an email dated 3/12/2011 wit h the subject line 

i rt . i.? i tin i .... i i . . i . I 


•‘radiation - fvi” After rcviewinti the email. MILLS slated she w 

as not sure whv 1 1 

would have sent her the email. 1 1 was a nrivale citizen 



MILLS stated she.amid ixnt i'nv. 

;!! 

email 

what she meant when she typed “sending lor info not for forwarding” before sharing 


with CLINTON. MILLS had no concerns over her decision to forward the email on to 
1 STEPHEN MULL, or CLIN TON. 


| MILLS recalled being read into Special Access Programs 

(SAP) durum her DoS tenure, but did no: recall the specifics concerning '.he SAPs or read-on process. 


(Cj iS?W£) MIL.LS was asked to review an email date d 12/23/201 I with the sm ieet "(SBU).” Alter 
reading the email. MILL S stated the email ori ginated froml __ who was the 


1 and was forwarded to! 

[ who was 1 


and latcrf - 

MILLS stated she was "not surprises 

to see an email like this.” She further stated that 


nothing in the email concerned her in regards to its classification. MILLS was not sure why 


would have sent the email string to MILLS' Gmail account rather than to MILLS' DoS account. MILLS 
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further stated she did not recall if it was common to receive emails similar to the email in question in her 
Gmail account. MILLS was not aware of a formal process for providing notification of concurrence 
related to a High Value Target (HVT) to DoS Headquarters. 

(U/ /FQUO) Agents asked MILLS to review an email dated 12/27/2011 with the subject “(SBU).” 
After reading the email, MILLS stated that she had no concerns reg arding the cla ssification of the email 

and her decision to forward CLINTON the email she received from_ MILLS explained the 

goal was to observe what was going on in local media at the time, and she believed the email was related 
to that purpose. 


I __[Agent s asked MIL LS to review 

with the title l I and another dated I I with the titlef 

the two emails was sent on the DoS Secret netw ork, whereas the latter of 
unclassified DoS email. Both emails pertained to l 

stated that she did not recall the originator of the document_ 

remember the email, nor how the information contained in he email wou 


_|The first of 

twpdgcnjnents was sent via 

_ I MILLS 

_[ nor did she 

lave been relayed to 


CLINTON. At the prompting of her counsel, MILLS also stated she received between 400 and 700 
emails a day while at DoS, and thus could not remember specific emails. MILLS stated she could not 
confirm if t he information contained in the email agents asked her to review would have been relaye d to 
CLINTON. I I 

_ MILLS did not have 

any concern over the content of the information in the email being sent on an unclassified system. 

(U// POUO ) MILLS was involved in the development and draft process of some DoS policy 
memos, but it depended on the topic. Agents asked MILLS to review two of the same email dated 
10/4/2009 with the subject “Draft Holbrooke Team” and an attachment titled “Pak Paper 10- 
03dcjjs.docx.” One of the two emails was redacted by DoS in response to FOIA production, whereas the 
other was shown in an non-redacted format. MILLS stated she did not recall the information contained 
in the email she reviewed. MILLS did not know who would have drafted the memo. MILLS stated she 
was not familiar with the | | Report.” 

(U/ /FOUO ) According to MILLS, something might start in an unclassified format at DoS, but later 
be reclassified at a higher level when that information related to policy matters. MILLS was not sure who 
at DoS made the determination to change the classification. 

(U//P017©) MILLS did not recall any instances wherein she had concern over the way sensitive or 
classified information was handled at DoS. MILLS also did not recall any instances wherein CLrNTON 
shared (with MILLS) any concerns over the way sensitive or classified information was handled at DoS. 

(U// P6KJO) A copy of the original interview notes is enclosed in a 1A envelope. 
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Dale of iranscripiion 2/2/2016 


(U//F0W©) On February 1, 2016, STEPHEN D MULL, DOB]~ 


Federal Bureau oflnvestigation (FBI) Special Agentsj_ 


an 


I 


was intervi ewed by 

lin his office 


at the United States Department of State (DoS), 320 21 s ' Street NW, Washington, DC, Room 34 I7A. 
After being advised of the identities of the interviewing agents, and the purpose of the interview, MULL 
provided the following information: 


MULL is a career DoS Foreign Service Officer. From 2009 until June of 2010, MULL 
served as a Senior Advisor to the Secretary of State on Political Affairs. In June 2010, MULL was 
appointed DoS Executive Secretary, a position in which he served until October 2012. 


(U/ /POUO ) MULL later served as the United States Ambassador to Poland from November 2012 
until September 2015. Thereafter, MULL was appointed to his current position, Coordinator for Iran 
Nuclear Implementation. 


(U// FOU6 ) As Executive Secretary, MULL oversaw the entire DoS Executive Secretariat in 
regards to information processing, crisis management, travel support, and Information Technology (IT). 
MULL was more specifically tasked with overseeing the formal processing of information to and from the 
Secretary of State, HILLARY CLINTON, and her executive staff, to include the DoS Operations Center. 
This also included providing both mobile and in office IT support to the Secretariat. 

(LJ/ /FOUO ) While serving as Executive Secretary, MULL had very little direct interaction with the 
Secretary of State. MULL mostly interacted with the Secretary's Chief of Staff (COS) CHERYL MILLS. 

(U// FOU Q) Everybody in CLINTON'S front office, except CLINTON herself, was on the 
Principal Officer Electronic Messaging System (POEMS) system. MULL communicated with 
CLINTON's executive staff via POEMS. MULL was not aware how messages sent to CLINTON's 
executive staff were relayed to CLINTON, but assumed they were orally briefed. 


(U//FOU©) MULL was aware CLINTON was using a personal email account while at DoS. 
However, MULL had no role in setting up or maintaining CLINTON's personal account. MULL stated 
he did not know if the use of personal email accounts was common practice for previous Secretaries of 
State. MULL was not aware of a DOS policy at the time prohibiting the use of personal email accounts or 
servers. MULL further explained as Executive Secretary, he was responsible for overseeing the formal 
communications of the Executive Secretariat, but would not have been involved with providing and/or 
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maintaining information communication platforms. MULL did not know who assisted CLINTON in 
setting up the private email account and server she utilized at DoS. MULL did not know who was 
responsible for maintaining CLINTON's personal mobile communications devices, nor who was 
responsible for making sure the installation and use of said devices were within DoS policy. 


(U//FOUO) Early into CLINTON'S tenure as Secretary, MULL recalled being contacted by either 
MILLS or HUMA ABEDIN who asked about the possibility of the Secretary using an iPad to receive 
communications in her office MULL recalled following up on their iPad inquiry, but explained he 
believed it was ultimately decided that CLINTON could not have the iPad in her office because of 
restrictions associated with her office being a Sensitive Compartment Information Facility (SC1F). 

(U/ /FOUQ - ) MULL never observed CLINTON using a mobile device in her office, but recalled 
seeing a picture of CLINTON using her Blackberry device on her DoS plane. MULL was unaware if 
there was any prohibition concerning the use of a Blackberry on the DoS plane. 

(LI// F - BB6 ) MULL assumed Bluetooth capabilities were disabled on DoS issued mobile devices. 
MULL was not sure if CLINTON's private devices were configured the same way. 


(U//F OU Q ) Agents asked MULL to review an email titled “S Communications,” dated 8/30/2011, 
wherein it appears MILLS and ABEDIN ask MULL about the possibility of the Executive Secretariat 
issuing CLINTON a DoS Blackberry to use while her personal Blackberry was malfunctioning. MULL 
recalled informing ABEDIN and MILLS that while the Executive Secretariat could issue a DoS device, 
the DoS issued Blackberry would be subject to FOIA requests. MULL further recalled it was eventually 
decided CLINTON no longer needed the DoS device, and thus her request for a DOS Blackberry was 
never fulfilled. 


(U/ /FOUQ) MULL recalled receiving information from DoS Security 


sometime in 2011, indicating there was concern over the possibility that some personal email accounts of 
DoS employees were hacked MULL specifically recalled hearing CLINTON's Deputy Chief of Staff 
(COS) JACOB SULLIVAN'S personal e mail accou nt was amongst those compromised.| 
currently assigned to the U.S Embassy inf 


hs 


(U//FOU0) MULL also provided the following names of individuals at DoS who had knowledge 
of CLINTON's IT setup during her tenure as Secretary of State: 


OJ//F©0©)L 


who worked under MULL was the 


for the Secretary and her executive staff. 


(U//F0WO) TULINABO (TULI) MUSHINGI was the DoS Deputy Director for Administrative 
Support and supervised the DoS Mobile Communications Team. MUSHINGI is now the United States 
Ambassador to Burkina Faso. 
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JOHN BENTEL managed the DoS POEMS system. 

(U// FQU O - ) A copy of the original interview notes are attached in a 1A envelope. 
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(U/W) 

date of birth was interviewed at his office at The 


Washington. D.C 1 mobile telephone numbei 


by Federal Bureau of Investigation 
After being advised of the identity of 

(FBI) Special Agents (SA)|_ 

land] 


the interviewing agents, and the nature of the interview]_provided the following information: 


(U//F6W©)[ 


Jerved as the 


at the U S. 


Department of State, under the former Secretary o f State HILLA RY CLINTON, from[ 
the end of CLINTON's term in February of 2013 I |is a self described “Clintonista. 

relations hip with the CLINTONS dates ba ck to I 
"[under President Clinton. In 2009J 



(U//FOWO) As the 
and was responsible for[ 


Department of State matters. Each momim? 
talking points and responses to 


held a TS/SC I clearance 
Jany current 


1 worked with his staff to generate unclassified 
_This process often required the team 


to reference classified reporting to ensure that they had the proper context when formulating the response. 
The talking points were generated on the low side and were often based on reporting from the relevant 
country desk officer. Desk officers were responsible for coordinating information with external agencies 
as necessary, and were knowledgeable in how to protect sensitive sources and methods within their 
reporting. 

(U// FOUO ) Composing unclassified talking points required a continuous and conscio us effort to 
evaluate if a given piece of information was derived from a classified or unclassified source. 


described this process as an ongoing dilemma that they had to work through - How do you talk about 
diplomatic conversations in the public sphere without getting into details that may be confidential or 
protected? However, he noted that, they had grown up in this env ironment and knew how to separate 
classified information from unclassified statements. [p rovided that he and his team had 

received training on the handling of classified information. 
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(u//F©yo) 


five times a day to ensure that|_ 


worked very closely with CLINTON and would m eet with her four or 

were consistent with 


the thoughts and statements of CLINTON. 


initially traveled with CLINTON and then when 


she became c omfortable with the position he stopped traveling to manage his team in Washington D.C. 

would typically communicate with CLINTON via the Ops Center when she was traveling, 
[described CLINTON as a “paper person” noting that she preferred paper documents over 


electronic communications but he would email CLINTON when necessary. In these instances he would 
usually send the email to CHERYL MILLS who would either forward th e message to C LINTON or 


respond on her behalf. On occasion he would email CLINTON directly. 


did not receive any 


fonnal guidance on what, or when, to email CLINTON directly. This decision was based on his 
judgment. 


(U//F©«©) 


email release s, many of wh 
April of 2010 


in the recent CLINTON 
ch were related to the posting of diplomatic cables by Wikileaks in 2010. In 
(first began to get a sense of Wikileaks as_ 


Defens e information. Then in November of 2010 he was notified by__ 

| [ that the New York Times was preparing to publish a large nu mber of diplom atic cables in 
conjuncti on with a Wikileaks release. Over the next several months l had regular contact with 

I as well as l ~1 to discuss cables that there about to be 


releas ed. Upon receiving a media inquiry or a notification of an upcoming release,,._ 1 

| [ would review the cable(s) in question and then make requests to the media outlet(s) to omit or redact 
specific information that was deemed sens itive for operational or diplomatic reasons. These requests 
were not always honored and [ estimated that they had a .250 or .300 batting average. The 


Department of State had a rule by which they would not discuss any classified information in the cables 
but in instances whe re the cable was being incorrectly portrayed, or could easily be misconstrued by the 


reader. 


would provide additional unclassified background information to set the proper 


Iroutinely worked with MILLS, and any agency that had an equity in 


context for the cable, 
the specific cable, to formulate the response to the media outlet. 

(U/ /TOUO ) Wikileaks, and other media leaks, posed a difficult problem for the Department of 
State because the information was already outside of the control of the Department of State and was often 
about to be published. While the Department of State could say nothing in response to a media 
notification or inquiry, the stance of the Department of State was to play defense and try to limit the 
potential damage by engaging the media outlet and providing a justification for why sensitive information 
should be omitted or redacted. 


(U// F0 - UO ) 


first became aware of CLINTON'S private email account when he 


received an email where “H” was the sender He initially thought the email was spam but upon reading 
the message quickly realized that it was from CLINTON. Aside from the ambiguous username. 
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_was not surprised that CLI NTON was usi ng a personal email account because it is a common 

practice within the Department of State I | had no knowledge about the setup of CLINTON's 

private server but assumed that Under Secretary PATRICK KENNEDY and MILLS would have been 
involved in that process. 


(U// TOUO ) _had no concer ns about how CLINTON handled her communications 

during her tenure as Secretary of State. Nor did_have security concerns about anybody on 

CLINTON's team. He did not recall any instances where classified information was intentionally sent to, 
or from, CLINTON's email account. However, with respect to the emails on Benghazi, he noted that in 
hindsight some of the content should have been classified even though they did not believe it was 
classified at the time it was sent. 


) Due to the sensitivity of the matter, the interviewing auen s verbally req uested that 
the interview and the nature of the discussion confidential. V erbally 

agreed that he would not discuss the interview with other parties. 

(U//F0U0) was amenable to recontact regarding this matter, if necessary. 

(U//F OU Q) Agent notes are included in an attached 1 A. 
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i>;«c «• ir&«a-.ripiisi» 

- ilyfrWO) O iii-larch i 5.20)6.1 ~~1 telephon e numbed 

--J. was interviewed by Special Agent (SA}|_land Sa[_ 

_ at tile IB! Washington Kidd Cilice (WHO). After being adv ised of the identities oft he 

interviewing agents and the purpose of the interview. I I provided the following information: 

_tU'/FQt to! Lcrved as the I 


rernatnet 


State ('DoS; ini 


whe n he became |_ 

_J retired front Department of 


—' U| _ did not get alpn» will)I and described him as a "big head." 

_ [further explained he th ought I I did not know his fane, specifically concerning his 

weekly updates to DoS I leadquaners. | sont a weekly report directly to the Secretary of Slate 

wliciih wa^widcly-known ''yon didn't go direct'' with the Sec retary. Furthermore, there were coin-ems 



< Df/roUP i Dmine his ei tire DoS tenure.)_| was never in direct contact with the 

Secretary of State. was not aware HILLARY R. CLINTON was using a personal email 

address tor DoS business, n or that she was operating off a private email server white site was Secretary of 
State. Wilcn | needed to relay a message that required the attention of t he Secretary, he 

would follow the chain of co mmand and -go through an Assistant Secretary of State. main 

DoS contact at that level was I 
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ii»c;vi,--,i t-i 


understood any emails he sent to 


Oil il» M VOfi |' U : V 


or other contacts at DoS 


could be forwarded. He did not recall ever copying JACOB SULLIVAN. HUMA AB EDIN. or fl-fFR Y 
MILLS, on emails because they were nos in his chain of command. For urgent matters,] 
would follow protocol and contact the necessary parties via the DoS command center. 


W/f 


_recalled communicating directly with 

prior to Secretary CLINTON'S visit to Kazakhstan in 2010. but that was the only 


ume I5v could recall going outside of his normal command channels. 
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had access to both DoS unclassified and secret networks at the Embassy in 
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top secret network. 


I V V i 


h the subject] 
laughed and 


Annuls aski-df 


rromsn m 


KiiSIiuvnitil 


_I to review an email dated 

After reviewing the email. 


m summarizing this on this system."J_ 


re email wherein he types, "My high side is down, so 
J explained ii wasn't common for the high side to go 


down at the hmbassy, but it sometimes happened. He further explained alternative options for 
communicating classified information would have been a secure call to the DoS Operations Cen ter or "a 
caret ull v worded summary like this one” (a reference to the email tie reviewed). stated he 

iound the entail “tascinaiing" pveflttse i ! . was iti.si foilmvinn the rani on the i isama Bin Laden (UBf.) 


compound | _Jfurther stated the email was 

"getong close u> the line, obviously." However, he was not concerned about the email b ecause ii was jus ; 
'business as usual” for he and others to have to communicate sensitive matters t his wav l~ ^ ’ 

never received formal guidance on how to communicate information concerning! 




however, he slated that ">! you are a professional, you know how to do it and how much to do." 
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Agents asked 1 Ito review an email dated 


[vstli the subject] 

Alter reviewing the emaii. explained he d 
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addressed wore aware 


smut was 
I'urtherroore. ho had no 


»na-i'n> w ith sending im- information contained m the email over an unchwsified net work because 
believed he drafted the email .so that it did not contain specific sensitive details. 




A eg! 

| 

__| with the subject | 

Zfc 


run recall ijiy wMgXl touse ihcre iverJ 


cuts askeu|_ 
Kitcr review 


jewing tite emai 


t o res lew an em ail dated 

explaiiftd he did 


_with llie subjcct l _ 

this is right on the line." WhileL 


I 


Agents asked__ 

iter reviewing the emai 1.1 


to review a n entail dated 

exclaimed “again. 


did not recall the specifies concerning the context ol the 


ilk; stahjd there were no details contained in the email that would compromise a sensitive program, 
also pointed out that there were only three people involved in his original email. 


Jw'iih the subject 


Agents asked 


Alter reviewing the email! 

..1 * .4.t 1 .V' » \ *" 


to review an email dated 


stated that the 


ematl would have been sent around the time Pakistan closed olVborder cro ssings with AiVd nmisnirs durini. 
which there was increased tension between Pakistan a nd the United States.I It lid »<>t 


the ialkmaiiiill wnlaincJ.irt the email was of convert^ 

Agents asked 
K gents 


Jwuh the subject 


network and marked SEClUvlV/NOFOKN.[ 


to review an entail dated 
noted that the email was sent on a classified 
slated that he sent the email on the Secret 


network because it was still during working hours in Washington, IX.'. compared to the previous emails 
be viewed that wore sent after hours, an d it made more sense for accessibility. T he right method of 
sending a communication, according to 


possible dissemination of the message. According tq 


1 


was whatever method allowed for the fastest 


the S1 -1CRP1//N01 ; OR N marking and 
she sensitivity marking on the email he reviewed were automatically inserted as a default. 


Agents asked 


JIM 


: '-"'OI2 with the subject “US drone stri ke kiils 4 militant in Pakistan/' A 
Istaled "that’s inlerexiinn.i 


to review an email dated 

k z tyvitfwmg Ik; email. 


DoS.. 


] 1 noted that 

Iscm the news alert. 

ss “slicking her nose in wi 

tere it didn’t belong.'' 



[UNDON (media'news service} was hired by 
and further complained that she was 
I noted the information he added to the 
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FEDERAL BUREAU OF INVESTIGATION 


Dale ol iiiiiixcriplinn jy/jW/2016 

_ (U//Ff)HO) On March 10. 2016 J I form er_^__ 

_ was interviewed by Special Agent (SA) |_ LikISa I l inanl'BI 

olTicc in New Y ork. NY Al ter being advised of the identities oflhe interviewing agents and the purpose 
of the interview.!_j provided the following information: 

(UWOa ei I was thd I 

Prior to Itis tenure | __| 

■ I retired from 

Lorciun Service. i-ollnwinc his retirement.. served as a visit ini' Pinlbisml- J 

-- | |_|is currently ! _ 

_| a non-government organization (NGO). 

(Li//l 'OUO) Purine his Department of State (QoS) tenure.I had very limited interaction 

with the Secretary of State J~ I assessed he likely only met_ 

Secretary 1111.LAKY R. CLINTON in person on six occasions. These contacts occurr ed whcnl I 

traveled back to Washington. DC. for various meetings, or when the Secretary visited ! 
further assessed that duri ng the same time period he only spoke with Secretary CLINTON via telephone 
on two to three occasions. | also participated in monthly Secure Video Teleconferences (SVTC) 

with the Secretary. 


(Il//l , ()UO)|_| was never in direct email conta ct with Secretary CLINTON and did not 

know Secretary CLINTON'S email address. W'hen|_1 needed to relay a quick message hack to 

DoS Headquarters, he would generally email direct with Deputy Secretar y' of State JAC OB SULLIVAN 
or the Special Representative to Afghanistan and Pakistan LSRATi nfliceJ ISRAP enntiicts 

inel ided RICHARD HOLBROOKE.I _ 

and [ also sent a regular Secret cable to Secretary CLINTON onee a 

week. On rare occasions. I I may have emailed the SRAP office or SULLIVAN via unclassified 

email to alert them to a clas sified cable |_|was not sure how information lie provided was briefed 

to Secretary CLINTON, bun (“assumed the SRAP would brief at the level they saw fit." 


liiw.Miisiliuii on 0^/10/201 r> _;u _Nt« York. NY 


time liicuncd NfA 


tin' Uin.-iuih.-iu comains ikiiIkt tvConimcmlaUniis nor i'i inclusions til'tlic l-'UI. li is the properly oi'iIk I HI .mil is loiuicd in your iijrcin.' . ii 
.iiul ii> tnmciiis sire uni in he dislrihulat oulsidc \our aevno. 
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C'omiiiiniliiin olTI)-302 of_Inlcrviciy oil 


Oil l).VH).'2l)U». Page 


There were lluee main wavs I 


could report information back to DoS 


I leudqua Dors: 

1. Cable 

2. Classified email - us ually lor lateral information 10 other Ambassadors or to the National 

Security Council and|_| 

3. Unclassified email - for day to day interaction 


V1CS or a Top Secret network] 
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i m surprise! 



_<i i//nni trtil 

! 

was asked to review an email I 1 

line 


Jpon reviewing the email.| commented "wow... ] 


with the subject 
don't recall this 


to see it ami prefer not to comment. 


tu rns io ) 


n^as subsequently asked lo review : 
Upon reviewing each document. 


emails 

I ana in indicated he did not 


want lo comment. 


(U// l ' 'OUO) 


stated that the reference to "talkers" in referenced docuinetit[ 


----_,rolated 

Jalso explained the “SBU" caveat in the 


to ‘talking points" for foreign government discussions, 
email meant "Sensitive but Unclassified" was a selected classification option in his unclassified email. 
Other classification options included “IT lor unclassified. or“LU/SHU” Limited Use/Sensitive but 
Unclassified." 


(U/ VrOUO 't While being escorted to the elevator by SA 


mated he recent I v 


read a news article about tile invesligalinn into Secretary CMNTON’ s personal e mail server that opined 


that most of the classified documents were over classified. However. 


staled that after seeing 


die above referenced documents, he now understood why people were concerned about this matter. 
(U/ .TOUO ) A copy of the original interview notes is enclosed in a 1A envelope. 
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FEDERAL BUREAU OF INVESTIGATION 


Date <il'transcript ion IH/27Q<Hfi _ 


_LL/ ZI OIK) ) Oil April 25. 20I6.| __Lnmer | __ 

_ivjis interviewed bv Special Agent (SA)_and SA _in the FBI 

Washington F ield Office i W l -'()1 f>01 4' 1 ' Street N\ Washin gton, DC 20535. A lso present for the 

interview was[_counsel. as well as_ and ! 1 from 

the IDenartn ient ol'Justice ( DOJ ). 'I nc intervi ew was co nducted as a follow up to an interview of_ 

I conducted by SA [ and SA | [ on March 10. 2016. Prior to the interview . 1 | 

agreed to sign a non-disclosure agreement in anticipation of viewing documents during the interview that 
were classified as part of a Special Access Program ( SAP), After being advised of the identities of the 
interviewing agents and the purpose of the interview. ~| provided the following information 




vesluialuni ml l)l'lll<2tll(»_ ul_ W :i>liMillion. DC 


Date dteiuivO_N/A 
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Inli-rvicu oil 


. On 04/25/201(1.1’aec 


L-1 usually comnnn icatcd with Special Representative to Afghanistan and Pakistan (SRAP). 

I_[ and >ui assum ed lie in us 

have also wanted to SULLi vai\ to know, as ne noted sui.U VAN was one oi the recipients. _ 

assumed SULLIVAN would relay information ! j o "anyone at DoS who needed to know:" the 

Secretary of Stale. Deputy Secretary oI Slates, etc. SULLIVAN was not given guidance oil how to relay 
such information back t o DoS Headu uaners. but stated the email in question was sent at a lime wherein it 
was important to report. | | was not sure why he chose to send the email in question on a 

classified network. 


12/27/2011 with the su 
the context. However. 



_|Ay enls asked I llo rev iew an email fated 

J).” After reviewing the email.|_explained lie did not recall 

plated that the previously explained “cross b order event" took place a 


with the subject "US drone st rike kil 
explained the emmLttilS-Saill 
and forwarded to_ 


j Agents askeq_(to review an email dated 7/6/20 12. 

tants in Pakis tan." After reviewing the email. I I 

\ The email originated from tin A I* article found 
Isubsemicnllv forwarded the article to the Deputy 


Lilso staled that at the time he sent 


the email, he did not think the information he prov ided jeopardized any one involved. _ 

who was C'c'd oil an email in the exchange was the | for the U.S. in Pakistan. 

(U/ r H )U( » ) A copy of the original interview notes is enclosed in a 1A envelope. 
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(U//F OUQ) On December 11, 2015J 


lU.S. Departmen t o f State, was interviewe d by Federal Bureau 


]and[ 


of Investigation (FBI) Special Agents 
of the identities of the interviewing agents, and the purpose of the interview 
following information: 


After being advised 


provided the 


(U/ /FQU0f 


kvould meet with f 


1 where she was responsibl e for[ 
She assumed the role when[ 


for the U S. Department of State, fromf 


J left the position On a typical day 


meeting to discuss key issues 
would provide guida nce on what should be communicated! 
the briefing materials | 


he then Secretary of State HILLARY CL INTON at the daily 8:30 A.M. 

1 During the me eting CLINTON 
Prior to finalizing 


verify the message and to add any necessary details. 
Community (USIC) aside from a daily interagencyr 


Jwould then work w ith the relev ant Department of State components to 

Tldid not deal with the U S. Intelligence 


It raveled with 


b6 

b7C 


b6 

b7C 


CLINTON o n all of her foreign trips, during which[_ 
deputies. 


were handled by one of 


(U/ /FOUO )[ 


stated that she saw CLINTON fre quently throu ghout the day and as a 


result most of her communications with CLINTON were spoken ^ - b ould onl y recall one time 


when CLINTON emailed her directly and that was on the night of the Benghazi attack ! _lstated 

that at that time she had no knowledge that CLINTON was using a private email server ^ noted 

that CLINTON was not an email person and therefore assumed that CLINTON was conducting personal 
business when she was on her Blackberry. 


b6 

b7C 


(u//F©we) 


information to CL 
CLINTON or not. 


]also wor ked closely w ith JAKE SULLIVAN, CLINTON's Chief of Staff 
for Political Affairs, for routine matters. | ~| understood that SULLIVAN would relay pertainent 

NTON but she did not know if SLILLIVAN directly forwarded her emails to 

provided that she occasionally interacted with CHERYL MILLS but did 
dUMA ABEDIN. 


not have regular contact with 
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b7C 
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(U/ /FOUO j~ 


reviewed a n email,|_ 

f with the subject^ 


that she sent on 


Jpiece.” She confirmed that she 


remembere d the events surrounding the email. After carefully reviewing the entire email string 

gave a brief overview of the Benghazi attack and provided that this email was sent after she 


learned that the New York Times was planning to publish an article about the Benghazi attack and the 
annex. The topic was of particular interest because at that time the media only knew of the Consulate in 
Benghazi and information on the annex had not yet been publicly released 


(U//FO UO ) f 


]further explained that[ 


was to notify Department of State leadership when the media was preparing to 


release information on sensitive or controversial topics. Alerting leadership allowed the Department of 
State an opportunity to engage the media ou tlet to negotiate what details should be released and to prepare 


an appropriate public response. 


stated that she sent the email in question to alert Department 


of State leadership and National Security Council personnel of the upcoming article because of potential 
sensitivies around disclosing the existence of the annex. The subsequent messages in the email chain are 
responses from other individuals as they discussed a subsequent call that occurred with the New York 
Times that afternoon. 



information that is either classified or represents an internal Department of State deliberation. 

(U/ / F OUC ^ I ~l explained that internal deliberations are internal discussions about various 

international affairs and policies. These conversations do not necessarily reflect the official, or final, 
stance of the Department of State on a specific topic. Additionally, the information may be misconstrued 
by the casual reader or cause embarrassment to the Department of State if it is released in its original 
form. When her team finds an email containing a deliberative discussion they mark the relevant sections 
for redaction under the B5 exception. | j reviews th e team's wo rk before it is passed to the next 

phase of the review process within the Department of State. I 1 noted that a significant number of 

the items that her group recommended for redaction because they were deliberative products were 
ultimately p arked for redaction, by internal counsel, using the classified material (Bl) exception. 

did not know why internal counsel elected not to follow her group's recommendations but 


noted that as a result a significant number of FOIA released documents that are marked as containing 
classified information really only contain deliberative material. 


(U/ffe UO ) 


acknowledged that some of the emails marked as containing classified 


information did in fact have classified material. However, she quickly noted that she did not recall seeing 
anything that would potentially compromise national security or be considered criminal in nature. 
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(U//F6 U0) 


explained that the U.S. Department of State personnel commonly operate 


on the unclassified system. She gave the example of a diplomat who summarizes a diplomatic 
conversation on the unclassified computer system. In general, they don't believe such diplomatic 
conversations are classified because it is usually obtained through diplomatic discussions and not from 
sensitive sources. They would consider the discussion to be Sensitive But Unclassified (SBU) and 
transmitted on OpenNet with the expectation that it would be contained on the Department of State 
system and only accessed by legitimate users. 


( U/ /FOUQ) | |was aware of the counterintelligence threats facing the Department of State 

andnotedl 

_| Based on these experiences she is careful not to transmit sensitive information on the 

unclassified or unsecured systems and she advised her subordinates to do the same. However, despite her 
security posture she did not find fault with her colleagues who did otherwise. 
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fU/ /FOU e) On January 7. 


Special Agent (SA j 

was BLUMENTHAL 1 s attorney]" 


2016, SIDNEY BLUMENTHAL was interviewed at the law offices of 
Washi ngton. DC 20005 by Fede ral Bureau of Investigation (FBI) 


and S M 


. Al so present for th e interview 
]offic e telenhnnel I em ail address 


as well as Department of Justice attorneys 


and 


After being advised of the identity of the interviewing agents and the nature of the 


interview, BLUMENTHAL provided the following: 


b6 

b7C 


(U/ /FOUO) BLUMENTHAL is a friend of HILLARY CLINTON (CLINTON). Duringher 
tenure as Secretary of State from 2009-2013, he served as an informal political advisor by sending emails 
containing information he deemed to be helpful and interesting topics. BLUMENTHAL did not recall 
sending any such emails prior to CLINTON becoming Secretary of State. There was no set schedule for 
these emails, BLUMENTHAL was never paid for his advisory services, and there was no specific 
conversation with CLINTON regarding his informal role. However, CLINTON would occasionally 
acknowledge the value of his emails in a response to BLUMENTHAL. During this time, 

BLUMENTHAL was also employed by the Clinton Foundation where his duties were related to former 
President BILL CLINTON, his legacy, and some communication s of the Foundation. BLUMENTHAL b6 

reported to[_Jand does not recall what HILLARY b7c 

CLINTON's role was in defining his role at the Foundation. During this timeframe, BLUMENTHAL 
was also involved with the Clinton Global Initiative 

(S//pH$ TYLER DRUMHELLER was a c areer Central Intelligence Agency (CIA) employee who 
served in a number of capacities during his tenure I I b: 

_ During the timeframe in which 

BLUMENTHAL used DRUMHELLER as a source for information provided to CLINTON, 

DRUMHELLER was retired from the CIA. DRUMHELLER knew the information he provided would be 
forwarded to CLINTON and provided it because he thought the information would be useful and helpful 
to the United States Government (USG). He did not receive any compensation for the information. The 
caveats provided regarding the source of the information were directly from DRUMHELLER, with the 
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exception of the CONFIDENTIAL marking BLUMENTHAL would frequently place at the top of his 
communications with CLINTON The CONFIDENTIAL marking was meant to imply the email was of a 
personal nature from BLUMENTHAL and did not refer to classified USG information. 


(LJ/ /FOUO) DRUMHELLER had a business with large corporate contracts, but BLUMENTHAL 
did not know specifically who these contracts were with or what they were for. During a conversation 
with DRUMHELLER regarding humanitarian aid projects, BLUMENTHAL conceived of a project that 
would provide field hospitals and aid to Libyan refugees. DRUMHELLER stated BLUMENTHAL 
would receive a finder's fee if the project materialized, but it did not come to fruition. This potential 
finder's fee was the only financial relationship between DRUMHELLER and BLUMENTHAL. 


_has been a friend of BLUMENTHAL for several years and was 

retire d dur ing the time when BLUMENTHAL used him as a source. BLUMENTHAL does not know 
wherel 


[vould get the information he provided. 


(U// FQUO ) 
friend of BLUMEN' 


is a journalist involved in international education and has been a 


b6 

b7C 


b6 

b7C 


'HAL's for decades. 


M GARY BERNTSEN is a retired CIA officer who BLUMENTHAL met through LARRY 

JOHNSON, another former CIA officer. JOHNSON wanted BLUMENTHAL to hear BERNTSEN's 
story as described in BERNTSEN's book JAWBREAKER Neither BERNTSEN nor JOHNSON ever 
stated they were providing classified information or that they obtained any information from the CIA. 
BLUMENTHAL did not ask if the information was classified. 


( U//FOHO) f 
met when l 


_ lisa fo rmer|_ 

Iwas assigned to ! l in the 1980s 


who BLUMENTHAL 


b6 

b7C 


iUJ K//NF} BILL MURRAY is a former CIA Chief of Station and a friend of DRUMHELLER 


(U// FOUO) 


]was the 


during the 


GORDON BROWN and TONY BLAIR administrations. He is an old friend of BLUMENTHAL's and 
provided information on British politics and personalities 
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(U/ /FOUO )[ 


Iwas al~ 


BLUMENTHAL met through 
ASSAD, as well as others in the| 


information on the ASSAD regime. 


who b6 

[BASHAR AL- b7c 


government personally. He provided BLUMENTHAL with 


(U/ff etJO ) 


is an 


Jwith 


experience in, 


would be provided to CLINTON. 


Jprovided information he picked up and sometimes knew the information 
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(U//FOUO) BLUMENTHAL had no concerns regarding the sensitivity of the information he 
provided to CLINTON during her term as Secretary of State. Additionally, he does not believe any of it 
was classified. 


(U//FOU0) BLUMENTHAL held a clearance in the 1997-2001 timeframe when he was an 
assistant to President BILL CLINTON. He recalled a quick briefing on security and clearances, but has 
no recollection of being read-on to any special programs. 
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(U/ / E QUO) On December 31, 2015, 


interview ed by Federal Bureau of Investigation (FBI) Spe cial Agents 
Also present were Beth Wilkinson, Partner, and I 


°c 

ntsL 


and[ 


I was 


J Attorney at Law, a t Paul 


Weiss. Rifkind. Wharton & Garris on LLP, 2001 K Street, NW, Washington, D C., 20006, and 


interviewing agents, and the purpose of the interview, 


US. Department o f Justice. After being advised of the identities of the 

provided the following information: 


(U/ /FOU Oj 


has worked for HILLARY CLIN TON sired 1 when he was hired as her 


_ 1 In this role he served asj__ 

] worked on her campaign and was subsequently named|_ 


when CL INTON became t he Secretary of State (Secretary), at the U S Depa rtment of State (State). 


^currently works at [ but noted that he still acts as a 


part time advisor to CLINTON. 


reported to£ 


(U//FOU6) 


and for acting as the Secretary' sj_ 


lan d was primarily responsible for lead ing thef 


Iteam 


trips, with the exception of two or three trips, 
was relat ed to Inform ation Technology (IT) or the maintenance of the Secretary's phones or computers. 


_Jtraveled with the Secretary on all of her 

Jnoted that zero percent of his official job function 


However ! [ was technically savvy and was fr equently in contact with the Secretary and as a result 


she often asked him for assistance with such matters, 
technical help with their phone or computer. 


likened it to your parents asking for 


(u//f ouq£ 


]had regular and ongoing contact with the 


Secretary and, as such, the majority of their communicatio ns occurre d in person. However, he would 
communicate with her via phone or email when necessary. | stated that he received his first email 


from CLINTON in 2007 and confirmed that she u sed the follow ing email accounts: 
hl5@att.blackberry.net, hdr22@clintonemail.com] fegmail.com during her tenure. 


recently became public knowledge 


aide for Bill Clinton. 


^stated that he had no knowledge of CLINTON's private email server until it 
j knew JUSTIN COOPER because Cooper was a long time 


]never discussed the private server with COOPER until after it was 
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documented in the press. Similarly,[ 


]knew BRYAN PAGLIANO but never discussed the email 


setup or any other IT matters with him. 


Upon starting at State in 2009 V eceived a security clearance and received 


training on the handling of classified information. He was provided with a classified terminal at his desk 
but didn't have a reason to communicate classified information via email given his position. He could not 
recall any specific instances of using the classified email system and stated that he never transmitted 
anything marked as classified on an unclassified system. 


(U//TO«eX 


[d id not recall receiving any guidance from State on records management or 
the use of private email for official business. However, he noted that it may have been included in one of 
the numerous documents that he was required to sign when he first started at State. None theless, he tried 

to use his official email for official business and his personal email for personal business _|noted 

that there were some instances where he would email the Secretary from his personal email account such 
as when he was at home or traveling and wanted to send an article or press clipping of interest to the 
Secretary. Other examples of when he did this included when he first started and did not have a 
government email ac count; time s when there were system outages, or when he had difficulty remotely 
accessing the system. I I provided tha t the Secr etary neither approved of, or discouraged, the use of 


his private email account in these instances. 


had no knowledge of any intrusions or attacks 


against either his personal or government email accounts. 


(U/ /F0U0{ 


[listed the Secretary as 'EVERGREEN' in his personal email contact list. He 


explained that this had been the codename used by the Secret Service since she was the first lady. 


(U// FOUO ) During the interview [ [ .vas shown several emails tha t he had authored during 

his tenure at State while providing technical support to the Secretary | | reviewed each email and 

provided the following context: 

1. The first e mail was s ent in approximately 2010 after he purchased the first iPad for the 

Secretary.|_[did not recall the specifications for the device but believed it was the 

lat est model av ailable at that time I lo urchased the iPad and configured it to use 

the] fc /)gma il.com email account so that he could send articles of interest to the 

stated that she could not view the articles on her Blackberry and the 


Secretary. 

iPad and email account were setup as a way to test a different delivery method, 
did not recall the email account being used thereafter and was “fairly sure it wasn't used” 
after the initial setup. 
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2. The second email was sent just prior to the end of the Secr etary's term but[ 


not recall any further details about the context of the email. 


could 


stated that he only 
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purchased one iPad for the Secretary an d could not remember a second iPad, or any details 
of a recovery email account. [ recounted how after he gave the Secretary the iPad, 

the Secretary fell asleep holding the unopened packaging in her arms. This struck 
as funny because, in contrast, he would not be able to sleep if he had just received a new 
iPad. He noted that this episode was foreshadowing for how little she would use the iPad. 

3. The third email referred to the cover of a People Magazine edition from August 2010 and 

was an example of when | would use his personal email to send a message to the 

Secretary. 

4. _(could not recall any specific details regarding the fourth email but speculated that 

it referred to the collating of relevant news clips. 

5. In the fifth email the term “Dirty Space” refers to a non SCIF space, where unsecured 
communications could be used. 

6 . The sixth email references the Secretary's transition between Blackberry devices]_ 

remem bered that her first device was blue in color but he could not recall the make or 
model ! I stated that her second Blackberry was “not blue” but again could not 

reca 1 any addi tional details. The second device was remotely activated by COOPER and 

then_provided it to the Secretary once it was activated. He was unsure if she had 

additional Blackberry devices thereafter. 

7. The seventh email references a photograph that the Secretary took of the reporters 

traveling with her while they were in Greenland or Ice and. The Secretary wanted to share 
the photo with the individuals in the picture and asked! o remove any 

“identifiers” before sending the picture to them. _stated that “identifiers” simply 

referred to the Secretary 1 s email address as she did not want to inadvertently give out her 
email address. 


8 . The eighth email refers to t he Secreta ry's house in Washington, D C., on Whitehaven St. 
While discussing the email [provi ded that he did not recall any other emails being 

configured on the iPad besides j 2 jgmail.c 0 m. Nor did he see her use any other 

devices to access the clintonemail.com domain, aside from her Blackberry. He did not 
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recall her traveling with a laptop or other personal computers. 


9. The ninth email references t he switch to a personal office email system that was created 
after the Secretary left State. _stated that he had no involvement in the process 


aside from what is described in the email and that he did not have any other interactions 
with Platte River Networks. He was unsure who secured the hrcoffice.com domain but did 
not believe that it was | [ further provided that after leaving State 

he acted as a paid advisor to the Secretary while she was promoting her book. During this 
time he used a personal Gmail account until the hrcoffice domain was stood up. 


(U/ /FOUO )_provided that he was not directly involved in culling the Secretary's 60,000 emails 

aside from reviewing approximately half a dozen emails. In those instances, he was asked to provide the 
reviewers with additional context about the emails. 


(U/ /FOUO ) A copy of the above referenced emails and the original interview notes are attached in 
a 1A envelope. 
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, On June 21,2016]_ 

Federal Bureau of InvestiRation (FBI) Special Agent^ 


DOB 


an 


d[ 


was interviewed b y 

in his 


b6 

b7C 


Washingto n. DC Afte r being advised of the 


identities of the interviewing agents, and the purpose of the interview, 
information: 


provided the following 


(UZ/FOUQ') From Januar y. 2009, until January, 2011_|was thq_ 

|at the United States Dep artment of State (DoS). In this capacity, 

I reported to | 


(U// F0U 6) Following his tenure at DoS, 


] worked at the 


ltransitioned from the| |to 


b6 

b7C 


b6 

b7C 


thej 


|where he served as the 


P 

|in 2015 for his current position with the|~ 


(U//f=©W0)[ 


]held a Top Secret (TS)/Sensitive Compartmented Information (SCI) 


clearance while at DoS. He interacted regula rly with Secre tary of State HILLARY R CLINTON, and 
accompanied her on a few international trips | ~|was not in direct email contact with CLINTON, 


b6 

b7C 


and was not aware until r ecently how much of the information he emailed to her staff was forwarded up to 


CLINTON. 


recalled knowing CLINTON had a “different” account than others at DoS, but 


did not know it was a “private” email account. 


(U//F0W©) While at DoS,,_, 

Principal Committee (PC) meetings. Howev er! 
when he was working f 


“irregularly” attended Deputies Committee (DC) and 

was present for more PC and DC meetings 


] The NSC hosted all PC and DC meetings, which were 
convened by either the National Security Advisor or Deputy National Security Advisor. DoS was not 
present at every PC or DC meeting. Invitations and attendance depended on the topic. When DoS was 
invited to a PC or DC meeting, it was not uncommon for the DoS Regional Bureaus to send 
representation relevant to the topic of discussion. 
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(U//fOtf6)[ 


]Report,” and recalled^ 


was 


tasked with con ducting a pol icy review of Afghanistan and Pakistan early in Preside nt OBAMA's 
administration. | b id not recall how many different versions of the | | Report were 

generated. 


(U/ /T0U 6) Agents asked 


ho review an email and attachment dated 10/4/2009 and with 


the Subject : “draft" and an attachment title “Pak Paper 10-03dc.docx ” After reviewing the email and 
attachment ] I explained he vaguely rem embered the p eriod of time surrounding the email, but 

did not specifically recall the email or attachment. 


assessed he would not have been one to 
write the document attached to the email, and believed it was likely drafted by somebody in the Special 
Representative to Afghanistan and Pakistan's (SRAP) Office. 1 ~~l wo uld have likely been one of 


the final reviewers of the document, describing himself as the “Clean up guy.’ 
who was in the DoS Policy Planning Office, may have also been involved in drafting the document. 


(U// FOUO) Agents drew 


attention to the fact that information contained in the 


refere nced 1 0/4/20 09 email attac hment also appeared as SECRET//NOFORN in a March, 2009, version 
of thel lReport.| 


ldid not kno w who at DoS would have ultimately determined the 


lassessed either CLINTON or someone in her front office 
Relieved CLINTON and RICHARD HOLBROOKE 


classification of the document, 
would have classified the document, 
would have at least read the contents of the report p rior to finalizat ion Specific information contained in 


the report was publically discussed at the time, so in 


opinion, the document was not 


classified. Much of the information contained in the report was originally based from various 
contributors' expertise, therefore it would not have been classifie d He further stated that while he had no 


visibility into the DoS classification approval chain. 


assessed the report might have been 


considered Unclassified while it was a working document, and later classified when it became an official 
record. It also could have been marked classified because almost all documents intended for the NSC are 
classified for transmission 
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(U// FOU O) On 11/23/2015£ 
was interviewed in his office at thq~ 


Investigation (FBI) Special Agents (Sa£ 


the identity of the interviewing agents, and the nature of the interviev 
following information: 



Lby Federal Bureau of 
After being advised of 
provided the 


(U/ /FOU O ) From 2010 through 2012^ 


^served as the 


in the Department of State (DoS) Bureau of Near Eastern Affairs (NEA). 


oversaw the office which focused on DoS interests in North Africa, 
expert on 


was the DoS senior level 


(U/ / F OE * 0 t 
CLINTON in fact. 


did not directly communicate with Secretary of State HILLARY R. 
did not recall ever communicating directly with any Secr etary of State. 


did not recall ever communicating directly with CLINTON's executive staff. 


may have exchanged an email with CL INTON'S Chief of Staff for Public Affairs, JACOB SULLIVAN, 
on one or two occasions. I I did not recall ever communicating directly with CLINTON's Chief 

of Staff for Operations, CHERYL MILLS. 


(U/ ffOU eJ 
superiors in NEA 


interfaced with DoS executive management predominately through his 
would communicate to Deputy Assistant Secretary (DAS) JANET 
SANDERSON and RAY MAXWELL or Assistant Secretary JEFFREY D. FELTMAN, who was later 
replaced by BETH JONES. 


(U//FOU6f 


and NEA management had separate computer terminals for handling 


Unclassified and Classified materials. 


Dining his tenure as the[ 


was 


on the phone dally with ihc then Ambassador of Libya, CHRISTOPHER J STEV ENS, who was later 


killed in the September 12, 2012 attacks on the U.S. consu late in Benuha zi. Libya. 


would 


bnd STEVENS would 


come into work early and talk to STEVENS on the phone, 
communicate through both open and classified means of communication. However, the classified 
communication capabilities were limited in Libya. 
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(U// FOUO) Following his conversations with S TEVENS 
DAS. If the information was particularly time sensitive, 


Jwould orally brief the NEA 


Kvould sometimes write an email 


Jassumed the NEA DAS briefed up whatever information they deemed importan t from 
priefmgs to SULLIVAN and/or MILLS. Q uestions regar ding the information. 


provided came back down through his chain of command. [ 


did not recall ever being directly 


questioned by CLINTON, MILLS or SULLIVAN regarding any of his reporting. 


(U//FOUe£ 
by Do S, nor didf 
server. 


was not aware CLINTON was using a private email account not assigned 
have knowledge that CLINTON 1 s email was hosted on a private, non-DoS, 

|did not recall ever receiving a direct email from CLINTON, other than an email or 
two that would have been sent to the entire DoS. I l only learned of CLINTON 1 s private email 

and server when the story broke in the Press earlier this year. 


(U//F6 U6 - ) Agents askeef 


to review an email ! b ated 11/18/2012 with the 

Subject line “FYI - Reports of arrests - possible Benghazi connection.” The email was shown to 
Has it was released by DoS FOIA office, and as it appeared on the DoS R eading Room. 


J 


was sent on a Sunday evening, and it would not have been unusual for 


noted that the email 
|to be in his office 


Jassessed that he likely sent the email from the office, but sent it via 


during that time | 

unclassified email, as most of the people who needed to be briefed on the information were not in the 
office and did not have access to classified communications at the time. 
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(U//FOUO) The individuals 


addressed the email in question to were as follows: 


BETH E JONES, Assistant Secretary NEA 

RAYMOND D MAXWELL, Deputy Assistant S ecretary NEA 


(U//F0WI 

noted that| 


land (spoke nearly 

daily during 

tenure as| 

1 The two would converse 
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via high side em ail or orally. 


was received via an unclassified telephone conversation. He further assessed 
received the information from the RSO or Legal Attache (LEGAT) visiting from Cairo. 


(U//F0W©) 


had no knowledge of his email being forwarded, but assumed that the 


individuals he emailed direct would either forward the information on to the appropriate executives or 


b6 

b7C 




FD-3()2a (Rev. 10-6-95) 


Conlimialion of FD-302 of 


Interview o 


.On 11/25/2015 . Page 


brief them orally £ 


noted that in general if information is sent to SULLIVAN, he assumed it 


would be forwarded or briefed to CLINTON. 


(U//FOUe£ 


noted that some of the language contained in the email may have later 
been classified, but due to special circumstances surrounding the situation at the time he received the 
information, there was a necessity to share the information quickly. 


(u/ffe uo ) 


concerning the call that preceded the email in question, 
his calendar/notes from that time period if requested. 


|kept notes with his cal endar, and may have recorded some information 

indicated he would attempt to locate 


(U//-FOUO} 


interacted with the DoS Ops Center a few times a week during the Libya 


crisis. The Ops Center would set up management level conference calls. DoS' s Crisis Management 
Group was also collocated in the Ops Center during the crisis in Libya 


( U//FOUQ)l prefers oral briefings over email, and noted he did not grow up in the age 

' Jdoes not mark his DoS emails for the record, but maintains an archive of his 


of email. |_ 

personal DoS email account when his mailbox fills up and he needs to free-up more space. 


(U//FeUO)^ 


never used a non-DoS email account for work related communications. 


(U/ /FOUO £ 


was never asked to move something from the high side to the low side in 


a way that seemed inappropriate. 
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(U// FOUO) Agents notes are maintained in a 1A envelope. 
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(U//F©We) On May 24, 2016, HEATHER SAMUELSON, Date of Birth (DOBJ 
was interviewed by F ederal Bureau of Investigation (FBI) Special Agents ] 


Jand 


at the law offices of Wilkinson Walsh + Eskovitz, 1900 M Street NW, Suite 800, 


Washington, DC. Present for the interview was SAMUELSON's counsel, Beth Wilkinson, Partner, 
Alexandr a Walsh, Partner, a nd Hal Brewster, A ssociate. Also present was FBI Section Chief Peter Strzok, 
as well as | j and l 1 from the Department of Justice (DoJ) Counterintelligence 

and Export Control Section. After being advised of the identities of the interviewing agents and the 
purpose of the interview SAMUELSON provided the following information: 
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(U//-FOUO) SAMUELSON is currently serving as a personal attorney for HILLARY CLINTON. 
She previously worked at the Department of State (DOS) during CLINTON's tenure as the Secretary of 
State. SAMUELSON initially worked as an assistant in the White House Liaison Office at DOS and then 
was promoted to the head of the office. SAMUELSON had infrequent interaction with CLINTON while 
she was at DOS and primarily interacted with CHERYL MILLS. Following the completion of 
CLINTON's tenure, SAMUELSON worked for one year in the office of the White House Counsel before 
becoming CLINTON's personal attorney. 


(U//FOUO) SAMUELSON held a TS/SCI security clearance while she was at DOS. She 
maintained the clearance when she left DOS and still holds the clearance today. SAMUELSON's 
clearance was reinvestigated in 20L4 per standard procedures. SAMUELSON received training on the 
handling of classified information when she received her clearance and after the reinvestigation but she 
did not recall the specifics of the training. SAMUELSON did not receive training on the Freedom of 
Information Act (FOIA) or the Federal Records Act while at DOS. However, she did receive training on 
the Presidential Records Act while she was at the White House. SAMUELSON did not receive any 
specific guidance on what documents she should retain when she left DOS 


(U//FOUO) SAMUELSON provided that she only received two emails from CLINTON while she 
was at DOS; one on her birthday and another following the death of SAMUELSON's grandmother. 
SAMUELSON did not become aware of CLINTON'S use of a private email account and server until she 
was serving as CLINTON's personal attorney. 
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(U/ /FOUO ) SAMUELSON had no contemporaneous knowledge of the decision to transition from 
the private server in Chappaqua, NY to the services of Platte River Networks (PRN) Nor did 
SAMUELSON have contemporaneous knowledge that an archive of CLINTON's emails was created by 
MONICA HANLEY following CLINTON'S tenure at DOS. SAMUELSON did not know the location of 
the laptop, or thumb drive, containing the archive created by HANLEY 

(LJ//F OU Q) SAMUELSON knew CLINTON transitioned her email to an @hrcoffice.com domain 
following her tenure at DOS. SAMUELSON believed no old emails were transferred from the 
@clintonemail.com to the new domain. SAMUELSON did not know how CLINTON or HUMA 
ABEDIN accessed old emails after the new domain was established. 


Request from DOS 

(U//FOUO) SAMUELSON provided that she was not involved in the initial discussions with DOS 
regarding the production of records from CLINTON'S tenure SAMUELSON believed DOS had noticed 
gaps in its records and had reached out to CLINTON, and other former Secretaries of State, to request that 
they produce any relevant records in their possession. MILLS spoke with the department about this 
request in late July or early August 2014 and then asked SAMUELSON to assist with the effort. MILLS 
also received a formal letter from DOS Under Secretary PATRICK KENNEDY, in October 2014 
regarding the request. 

(U/ /FOU 0) To SAMUELSON's knowledge DOS did not provide any formal guidance on how to 
conduct the search aside from indicating that it was CLINTON's responsibility to assess which products 
were work related and which were personal. SAMUELSON stated that DAVID KENDALL and others 
from Williams & Connolly LLP served as external representation for CLINTON in this matter. 

Collection of Relevant Emails 


(U// FOUO ) SAMUELSON had no emails that were responsive to the DOS request before she 
contacted PRN. In late July or early August of 2014 she requested PRN provid e all emails from 

CLINTON's tenure that were sent to, or received from, a “.gov” email address|_|of 

PR N. extracte d the relevant files and then transferred them to SAMUELSON. To transfer the files, 

I sen t SAMUELSON an email link that gave him access to her computer after she clicked on 


it.|_|then downloaded the email files onto her laptop and configured them so she could access 

the password protected emails via Microsoft Outlook. SAMUELSON described herself as “technically 
deficient” and stated she was near her computer while this transfer occurred but she did not pay close 
attention to what he was doing. She did not recall t he name of the file he transferred to her computer, the 
location on her computer where it was placed, or if | took any steps to encrypt the file before 

transferring it. 


(U/ /FGUO - ) SAMUELSON was not aware of how[ 


1 


ueried the files or what 


mailboxes on the PRN server were searched. More specifically, she did not know if the emails were taken 
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from the live mailbox or from the HRC archive that had previously bee n provided to P RN by HANLEY. 


SAMUELSON stated that she just asked PRN for the “ gov” emails and 


gave them to her. 


(U// FOUO) In late September or early October of 2014, SAMUELSON requested that PRN 
provide a full export of all of the emails from CLINTON 1 s tenure to ensure they captured all relevant 
emails. SAMUELSON stated this request was not done in response to any identified gaps, but in an effort 
to produce all relevant emails. 


provided the full export to SAMUELSON using the same 


remote access process as described above While providing the full email export to SAM UELSON, he 
removed the previously provided “.gov” emails. Upon realizing this SAMUELSON asked ! 


to give her the “ gov” export files again because she wanted to use it as the starting point for her 
collection of responsive records. Upon receiving the “.gov” export for a second time, SAMUELSON 
noticed that some of the emails from the initial export were no longer included. SAMUELSON recalled 
that there seemed to be a pattern with the missing emails and it involved “.gov” addresses that were in the 
carbon copy (CC) line of the email. SA MUELSON ag ain contacted PRN and requested that they provide 
the missing documents and in response f [ provided several smaller pst exports to fill the 

identified gaps. 

(U/ / ' F '6 U6 ) SAMUELSON had requested PRN pull all emails from Clinton's tenure, January 
2009 to February 2013. However, upon receiving the above described exports she noticed emails were 
missing for the period of January 2009 to March 2009. She asked PRN to double check for emails from 
that time period but they were unable to locate any responsive emails. SAMUELSON came to believe that 
those emails were not backed up on any server and had only resided on the Blackberry CLINTON was 
using at that time, thus making them un-retrievable. SAMUELSON did not have contemporaneous 
knowledge of the Apple server and therefore did not make an ef fort to check it for relevant records. In 
searching for other relevant records, SAMUELSON checked the| 


Bgmail.com account and 


found one email exchange. SAMUELSON did not contact other associates of CLINTON, to include 
HANLEY, to request any records they might have. 
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(U/ /FOUO ) SAMUELSON was shown a PRN invoice #37068, dated August 16, 2014, which 
contains the work description “Worked with Heather via phone/remote session to restore access to 
archived emails per CDM.” In response, SAMUELSON stated that she did not know what that work 
description meant and that she didn't recall ever losin g access to the exported emails, aside from when the 
initial “ gov” export was removed by | 

(U/ /FOUO) SAMUELSON was shown an internal PRN email from I I referencing an 

urgent phone call with CESC on November 24, 2104, to which she provided she had no recollection of 
what the call was about. SAMUELSON was then shown a PRN work ticket report from November 24, 
2014, which contains the summary note “Worked with Heather via phone/remote control session on more 
specific export requirements.” In response, SAMUELSON stated she could not speculate on what those 
notes meant and she was unaware of any activities by PRN to “re-establish connection to HRC emails” in 
November of 2014. 
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(U//FOU0) SAMUELSON was never given direct access to the mailboxes on the server and she 
was not aware of anybody else being granted such access. SAMUELSON was never given administrative 
access to the server and she was not aware of anybody else being granted administrative access. 

Cull and Review of Emails 

(LJ// FOUO ) SAMUELSON stated she was primarily responsible for conducting the review at the 
direction of MILLS and KENDALL She conducted the review over the course of several months and 
completed it just prior to December 5, 2014, when the documents were turned over to DOS. 
SAMUELSON conducted the review on her laptop, both in her apartment and in MILLS' office in 
Friendship Heights, Washington DC. 

(U//F OUO ) SAMUELSON reviewed the emails provided by PRN in Microsoft Outlook and 
placed any responsive emails in a separate folder. She began by adding all of the “.gov” emails and any 
email to or from a “.mil” email address to the folder. She then searched the emails provided by PRN for 
any email to or from senior leadership at DOS. This included key individuals such as Under Secretaries, 
Assistant Secretaries, Ambassadors, Department Heads, and Senior DOS Aides. SAMUELSON then 
reviewed the sender and receivers of the remaining emails to identify any congress members, foreign 
leaders, or other official contacts. Lastly, she searched the remaining emails for key words that included 
terms such as Afghanistan, Libya, and Benghazi. 

(U//E OUO ) SAMUELSON reviewed the sender, receiver and subject line of every single email 
during the review. However, she stated that she did not read the content of each individual email if she 
could determine it was a work or personal email from the sender, receiver or subject line. SAMUELSON 
provided that she did her best to review and identify any emails that were potentially a mix of work and 
personal content. When asked how work related emails between ABEDIN and CLINTON may have been 
missed, SAMUELSON stated ABEDIN may have kept emails that CLINTON did not. 

(U/ /FOU O) SAMUELSON did not have a formal process for removing duplicate copies of the 
same email from the set of work related emails. She did not ask PRN to assist with this process. 
SAMUELSON stated she would remove a copy of the email if she noticed that it was a duplicate but she 
did not have a formalized or consistent process for identifying and removing duplicates. 

(U//FOUO) Upon completing the review, SAMUELSON printed all of the emails she deemed to 
be relevant. The paper copies were then subsequently reviewed by MILLS and KENDALL and anything 
they deemed not to be work related was shredded. The remaining physical documents were ultimately 
provided to DOS. SAMUELSON stated that she printed the emails in MILLS' office and noted there is 
still a printer in MILLS' office but she was not sure if it was the same printer. 

(LI//FOttO) Following the review, SAMUELSON created a digital copy, or a “preservation copy,” 
of the relevant documents that were provided to DOS. The files were placed on a thumb drive and 
provided to KENDALL. SAMUELSON believed this drive is the same thumb drive provided to the FBI 
by KENDALL. SAMUELSON also created a second copy of the documents provided to DOS and placed 


UNCLASSIFIED/Z^Ot^O - 



UNCLASSIFIED//FOW© 


FD-3()2a (Rev. 10-6-95) 


Continuation of FD-302 of_ Intcivicw of Heal her Samuelson _. On 3/25/2016 , Page _5 


them on a second laptop of hers. SAMUELSON was not aware of any other copies of the files. Nor was 
she aware of a master copy of all of the personal and private emails. 

(U// FQU Q) SAMUELSON was shown copies of the thumb drives previously provided to the FBI 
but could not recall if any were the same as the one she had used One of the thumb drives was labeled as 
“HC PRIME 2” and SAMUELSON did not know what the label referred to 


(LJ// FQUQ ) The review methodology was developed by SAMUELSON, MILLS and KENDALL 
SAMUELSON did not consider using any commercially available e-discovery tools for the review and 
they did not consult any individuals who were not “an agent of Clinton” during the review process. 
SAMUELSON stated they did not discuss how to handle potentially classified emails during the review 
because they had no reason to believe any classified material was contained in the emails. She further 
noted that none of the emails were marked as being classified. 

(U/ / F QUO ) During the review process SAMUELSON noticed the imported emails displayed 
CLINTON's email as hrodl 7@clintonemail.com despite the fact this addres s was not created until after 
CLINTON's tenure. SAMUELSON discussed the issue with l I but she did not fully 

understand his explanation for why this was occurring and he was never able to resolve the problem. 
SAMUELSON did not consult anybody else about this issue. 
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Deletion of Entails 


(U//F©Ue) In January of 2015, SAMUELSON asked[ 


to remove the exported 


emails files that had previously been provided to her by PRN. While she retained separate digital copies 
of the emails provided to DOS, as discussed above, she no longer wanted the ema il exports provided by 
PRN on her computer. Using a similar process as described a bove! a ccessed her computer 

remotely and removed the files. SAMUELSON provided that ! I took additional steps during 

the deletion process so the files would not be recoverable. SAMUELSON did not know what software or 
processes were used by | | but believed that the files would be difficult, if n ot impossible, to 


about deleting 


recover. SAMUELSON did not remember having any discussions with 
relevant data from the free space of her laptop Nor did she recall any discussions with 
about the use of “BleachBit.” SAMUELSON did not recall deleting any of the files by herself before 
contacting PRN. - 


(U/ /FOUO ) SAMUELSON stated that in May of 2015 she deleted some emails from her copy of 
the work related emails that were previously provided to DOS. SAMUELSON explained that she was 
notified by DOS, prior to the release of the first tranche of FOIA emails, that some of the work related 
emails they had turned over were classified. She was instructed by DOS to delete the files and then empty 
those files from the trash bin. SAMUELSON did not believe these files were removed from the thumb 
drive she had previously provided to KENDALL. 
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(U// FOU O) In or about December of 2014, SAMUELSON was on a call in which the email 
retention policy was discussed. She was aware the retention period was changed to 60 days and any older 
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emails would be deleted. However, SAMUELSON did not direct PRN to remove any exported .pst files 
on the server or any mailboxes on the server. 

(U//F OU Q) SAMUELSON was not aware of any other deletions of relevant emails. She was 
aware PRN traveled to the datacenter in March of 2015, via her role as counsel, but had not instructed 
them to do so. SAMUELSON was not aware of exports or deletions conducted by PRN on the server in 
September of 2015. 

Devices used During the Review 

(U/ /FOUO ) SAMUELSON used her own laptop to conduct the review and noted that she also 
used the laptop for other work related matters as well. She described it as a Lenovo Yoga 2 laptop. 
SAMUELSON stated that following the review she accidentally spilled water on the laptop. Fearing that 
the computer would fail, she purchased a second Lenovo laptop and placed a copy of the emails that were 
prepared for DOS on it. SAMUELSON noted that the Lenovo Yoga 2 computer continued to work until 
sometime last year when it failed to power on. The Lenovo Yoga 2 computer is currently in the 
possession of her counsel and the second Lenovo was given to KENDALL and then subsequently turned 
over to the FBI. SAMUELSON reviewed pictures of the laptops that were previously turned over to the 
FBI and stated that the silver Lenovo laptop appeared to be the same as the laptop that she used. 

(U/ /FOUO - ) SAMUELSON stated that both laptops were connected to the internet and they both 
had antivirus software installed on them. SAMUELSON did not repurpose the laptops after the review 
and never attempted to reformat or factory reset the computers. 

(U/ff OUO ) A copy of the original interview notes are enclosed in a 1A envelope. 
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06/07/2016 


MARCEL LEHEL LAZAR (LAZAR), also known as (AKA) 

alien registration number 


'GUCCIFER' 


date of 


was 


birth 

interviewed at the UNITED STATES ATTORNEY'S OFFICE (USAO), 401 Courthouse 
Square, Alexandria, Virginia 22314. LAZAR was advised that the nature of 
this interview was to discuss the extent of LAZAR's hacking activities 
related to HILLARY CLINTON'S (CLINTON) personal email server. After being 
advised of the identities of the interviewing Agents and the nature of the 
interview, LAZAR provided the following information: 

LAZAR began by stating that he had never claimed to hack the CLINTON 


]then advised that FOX NEWS had recently published an 


server. SA 

article which reported that LAZAR had claimed to hack the CLINTON server. 
LAZAR then stated that he recalled the interview with FOX NE WS , and that he 

had lied to them about hacking the CLINTON server. SA_then asked 

LAZAR to provide a complete explanation of his hacking activities 
surrounding the CLINTON server. LAZAR provided the following information in 
response: 

On or about March 14, 2013, at approximately 6:00 AM [Romanian Time], 

LAZAR was perusing _ address book. Within it, LAZAR identified 

an AMERICA ONLINE (AOL) email account of 


Eaol.com, which he later 


determined to be the personal email account of SIDNEY BLUMENTHAL. LAZAR 
then made several attempts to access BLUMENTAL's email account. After 
approximately 20 minutes, LAZAR was able to successfully gain access to the 
account by correctly answering an account security question, which in turn 
allowed him to reset the password for the account. LAZAR then utilized the 
new user credentials to access BLUMENTHAL's account. 

LAZAR recalled that BLUMENTHAL's account contained approximately 
30,000 emails, which took him approximately six to seven hours to sort and 
review. LAZAR downloaded approximately 25 attachments that were contained 
in the emails, including memorandums (memos) and briefing documents. He 
recalled that some of those attachments were official memos between 
BLUMENTHAL and CLINTON. Additionally, LAZAR took screenshots of other items 
in the account that he deemed to be of interest. LAZAR recalled taking a 
screenshot of an email that contained information related to the Benghazi 
incident. 
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SJhile looking through BLUMENTAL's account, LAZAR identified one email 
exchange between BLUMENTHAL and CLINTON, where CLINTON was using the domain 
of clintonemail.com . LAZAR reviewed the header information for that email 
in attempt to identify the originating IP address for the mail server 
associated with that domain. LAZAR identified one corresponding IP address, 
which was 127.0.0.1. LAZAR recognized that IP address as being an internal 
routing address and assumed that it was assigned to an internal mail server 
at the AOL service provider. Therefore, LAZAR had no additional information 
about the CLINTON email server, and concluded his hacking attempts against 
it at that time. LAZAR stated that this was the full extent of his hacking 
activities related to the CLINTON email server. 


After spending approximately six or seven hours in BLUMENTHAL's 
account, LAZAR took a break from the computer which lasted approximately 
two to three hours. When he returned to the computer, he no longer had 
access to BLUMENTHAL's account. LAZAR recalled that his access was 

I Time. He assumed that BLUMENTHAL likely 


terminated around 8:00 AM 
made a phone call to AOL in order to reset his password a nd regain access 
to the account. LAZAR believed that BLUMENTHAL resided in| lat that 

time. 


As a form of normal practice, LAZAR v?ould send the results of his 
hacking activities to news agencies w orId~v;ide. Aft er accessing 
BLUMENTHAL's account, LAZAR contacted 


at THE SMOKING GUN and 


advised that he was going to send the BLUMENTHAL information to 
approximately 100 different news agencies, which he had identified prior to 
the compromise of BLUMENTHAL's account. 


LAZAR recalled using a variety of computer hacking tools for his 
hacking activities, such as ANGRYIP, METASPLOIT, SUBSEVEN, and CAIN AND 
ABLE. LAZAR used a remote administration tool (RAT) as well, to create his 
own malware. That tool operated by splitting an existing malware exploit 
into two pieces, manipulating the hexadecimal code, and then repacking the 
malware for deployment. LAZAR recalled using the SUBLEGEND? tool for this 
activity. LA2AR utilized this technique to send out spear-phishing emails 
to various targeted victims. The malware would ultimately install a 
key-logging software on the victim computer. 


When asked to elaborate on the key-logging software, LAZAR stated 
that he could not. When asked how he retrieved the results of the 
key-logging software from the victims, LAZAR provided that the software 
allowed him to enter a return email address and the results of the 
key-logger were emailed to that account. LAZAR could not recall the email 
accounts that he used for this activity. LAZAR sent this form of malware to 
approximately 100 different people and estimated that only approximately 15 
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of them ultimately opened the attachment. LAZAR did not send any 
spear-phishing emails to users at the clintonemail.com domain. 
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During other hacking quests, LAZAR utilized various IP scanning tools 
to determine whether or not an IP address was online and which ports they 
made available on the Internet. LAZAR recalled using the ANGRYIP scanning 
tool most frequently. LAZAR attempted to use Russian proxy servers for his 
scanning activities in order to evade monitoring by the United States 
government. Russian IP proxies afforded him with faster Internet speeds 
than others. LAZAR repeatedly checked his outfacing IP address in order to 
ensure that he was using Russian proxies. 

When asked how he utilized Russian proxies with the ANGRYIP tool, 
LAZAR relayed that the tool itself afforded the ability to connect to 
Russian proxies. LAZAR could not provide any additional details on how the 
ANGRYIP tool accomplished this. 

When asked about other Internet proxy usage, LAZAR provided that he 
also utilized MOZILLA FIREFOX as his browser of choice, and that a plug-in 
was available for the browser which routed Internet traffic through Russian 
proxies. LAZAR could not provide any additional details on how the plug-in 
accomplished this, nor could he recall the plug-in that he used in FIREFOX. 
LAZAR also used the HIDEMYASS website for masking his online activities as 
well. 


In the beginning of the interview, LAZAR recalled using the METASPLOIT 
tool in approximately 2008 or 2009. He stated that he was merely an amateur 
with METASPLOIT and that he really didn't understand how to use it. LAZAR 
utilized METASPLOIT on WINDOWS computers only, from a graphical user 
interface (GUI) rather than the WINDOWS command prompt. LAZAR is not 
familiar with the LINUX operating system. Later in the interview, LAZAR 
recalled using METASPOIT in either 2009 or 2010, during which time frame he 
made a how-to FACEBOOK video that demonstrated how one could take a remote 
screenshot of a user's desktop with METASPLOIT. 

LAZAR utilized the CAIN AND ABLE software tool for password cracking. 
He also used that tool from a GUI rather than the command prompt. LAZAR 
recalled that the GUI had green and red buttons on it. When asked to 
describe how he utilized the CAIN AND ABLE program, LAZAR stated that he 
would use it for password cracking once inside a network. When asked 
whether cr not he used it for cracking password hashes that were dumped 
from a he replied yes. When asked to further describe the process of 

dumping p®&&wcrd hashes from a system, LAZAR provided that he could not do 
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so in English. When asked whether or not he could describe that process in 
Romanian, he stated that he could not. LAZAR used the CAIN AND ABLE 
software product in either 2010 or 2011. 

LAZAR used other remote administration tools for his hacking 
activities, but could not recall the names of any of them. When targeting 
an IP address for access LAZAR often attempted to log into it via his web 
browser, by typing the IP address into the browser. LAZAR utilized multiple 
different computers for his hacking activities, none of which he has access 
to anymore. LAZAR recalled working with computers since he was 
approximately 15 years old. 

On approximately four or five occasions during this interview, LAZAR 
referred to himself as being an amateur hacker and not a professional. On 
one occasion, LAZAR also referred to himself as being a "script kiddie", 
who merely knows how to hack accounts by answering security account 
questions correctly, as he did with the BLUMENTHAL account. 
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(U/ /TOUO ) On December 22, 2015. BRYAN PAGLIANO was inteme wed by Federal Bureau of 


Investigation (FBI) Special Agents[ 


Technology Specialist/Forensic Examiner^ 


_|and Information 

Jat the offices of the Department of J ustice' s 


Counterintelligence and Export Control Section (CES) Also present, were AkinGump attorneys | | 

I Connor Mullin. Cou ns el and Mark M acDougall. 
_and[ 


from the 


Partner. Additionally 

U.S. Department of Justice were also present. After being advised of the identities of the interviewing 
agents, and the purpose of the interview, PAGLIANO provided the following information: 


(UZ/ FOU Q- t PAGLIANcf 


_|H1LLARY 

CLINTON, PAGLIANO came to work on HILLARY CLINTON 1 s 2008 presidential campaign as an 
information technology specialist. Following HILLARY CLINTON'S appointment as the Secretary of 
State in 2009, PAGLIANO gained employment at the Department of State (DOS) as an Information 
Technology Specialist in the Bureau of Resource Management. 
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(U/ /FOUO) In the fall of 2008, JUSTIN COOPER introduced himself to PAGLIANO via email 
and subsequently called PAGLIANO. In the call, COOPER stated he understood PAGLIANO was 
liquidating computer equipment from HILLARY CLINTON's 2008 presidential campaign and explained 
he was interested in transitioning from an Apple OS X private email server used by aides of BILL 
CLINTON to another email exchange server. COOPER asked PAGLIANO for help setting up new 
equipment to support a new email server and for assistance in the administration of the server. 
PAGLIANO began work on building an email server at K street using computer equipment from 
HILLARY CLINTON's 2008 presidential campaign. In late 2008, at the time PAGLIANO was building 
the server, he did not know HILLARY CLINTON would be Secretary of State or have an account on the 
server. PAGLIANO believed the email server he was building would be used for private email exchange 
with BILL CLINTON aides. 


(U//FOUO) Around March 2009, once the new server equipment was assembled, COOPER and 
PAGLIANO met at the CLINTON residence in Chappaqua, NY to install the server and migrate the email 
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accounts f rom the Apple OS X server to the new server. PAGLIANO also recalled that)_ 

_was present, as well as some United States Secret Service (USSS) Special Agents. PAGLIANO 

recalled the Apple OS X server to be in the basement at Chappaqua and consisting of an Apple Power 
Macintosh G4 or G5 tower and an HP printer supported by Internet Printing Protocol (IPP) over port 9100 
so that staff could print from the Harlem office. PAGLIANO installed the new server equipment which 
was comprised of a 12-unit (12U) rack with a Dell PowerEdge 1950 used as a Blackberry Enterprise 
Server (BES), Dell PowerEdge 2900, Dell unmanaged switch, 3U power supply, 3 terabyte (TB) external 
hard drive. Kiwi Syslog Server, and a Cisco Private Internet exchange (PIX) 515E IP firewall (the 
collection of server equipment hereafter referred to as Exchange Server 1). PAGLIANO stated that he did 
not utilize tape backups but implemented “disk-to-disk” backups instead PAGLIANO began the email 
migration from the Apple OS X server to Exchange Server 1 while on-site in Chappaqua in March 2009, 
but did not finish on-site and continued working on the migration from his hotel room PAGLIANO 
believed he “popped out” all the email from the Apple OS X server when migrating and that no email 
content should have existed on the Apple OS X server once it was migrated to Exchange Server I. 
COOPER changed the Mail Exchange (MX) records to ensure delivery to Exchange Server 1. There were 
only two system administrators on Exchange Server 1, PAGLIANO and COOPER. PAGLIANO 
disagreed with housing Exchange Server 1 in a residential basement due to having only one unreliable 
internet connection. COOPER disagreed and wanted physical access to Exchange Server I. PAGLIANO 
never knew of Exchange Server 1 residing in another physical location other than Chappaqua. 


(U/ / F OUO ) As far as the Apple OS X server is concerned, PAGLIANO did not know of any other 
function or use of the server, other than to facilitate email exchange. PAGLIANO did not know who 
installed the Apple OS X server, but believed COOPER was the only person with administrator access. 
Two email domains existed on the Apple OS X server, presidentclinton.co m and clintonemail.c om. Both 


1 andT 

Iliad email accounts on the presidentclinton.com domain, and HUM A 

ABEDIN and 

had email accounts on 


the clintonemail.com domain. Once email was migrated to Exchange server 1, all users could use either 
the presidentclinton.com or clintonemail com domains for receiving email but replies would be sent from 
the clintonemail.com domain for users of the clintonemaiI.com domain. PAGLIANO did not know if 
HILLARY CLINTON had an account on the Apple OS X se rver, but he did not migrate one. PAGLIANO 
did not know how users connected to the Apple OS X server. l 


3or COOPER would monitor the 


printer linked to the Apple OS X server, but PAGLIANO was unaware what, if anything, it was used for. 
PAGLIANO believed the people with physical acc ess to the A pple OS X server was anyone who had 
access to the basement at the CLINTON residence I ~l had physical access, but not administrative 

access, to the OS X server. Sometime after the email migration from the Apple OS X server to Exchange 
server I was complete, COOPER discussed repurposing the Apple OS X server with PAGLIANO. 
PAGLIANO believed the intention was for the Apple OS X server to be installed a s a workstation 
somewhere in the basement in Chappaqua for use by either COOPER or_ 
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(U//FOUO) PAGLIANO requisitioned the hardware for Exchange Server 1 from a datacenter at 
HILLARY CLINTON'S presidential campaign headquarters at 4420 W. Fairfax Drive, Arlington, 
Virginia. He recalled the PowerEdge 2900 to have been a Microsoft SQL server and PAGLIANO did not 
recall if he wiped the drives of the hardware used to build Exchange Server 1. PAGLIANO made the 
decision to use a Microsoft Small Business Server (SBS) environment on Exchange Server 1 since he had 
used it before and assessed it would be perfect for a small amount of users exchanging email. Exchange 
Server 1 was only used for email exchange, and although PAGLIANO did enable Windows SharePoint 
Services, it was never used. PAGLIANO wanted to use a cloud service similar to that used in HILLARY 
CLINTON'S 2008 Presidential campaign, but COOPER disagreed with PAGLIANO and did not want to 
use a cloud service. Because of this decision, PAGLIANO used an external hard drive to back-up 
Exchange Server 1 using Windows back-up service. To effect this change, PAGLIANO scheduled a task 
through Windows for a full back-up once a week and a differential back-up every day. These periodic 
back-ups would overwrite on the hard drive in a first-in, first-out manner. For security, PAGLIANO used 
Microsoft Forefront on the Dell PowerEdge 2900 as a baseline security analyzer. PAGLIANO recalled 
finding a virus, but recalled no other detail, other than it being nothing of great concern. PAGLIANO 
chose to turn File Transfer Protocol (FTP) off. 



) PAGLIANO thought the biggest vulnerability to Exchange Server 1 to be a Brute 
FA). PAGLIANO stated that BFAs increased over the life of the server and he set-up the 
OPER of a failed log-in attempt The Internet Protocol (IP) filtering on the server was 
515E straight IP block and PAGLIANO used Domain Name System (DNS) for inbound 
Dell PowerEdge 1950, PAGLIANO used a Kiwi Syslog server and tried to pull and 
all log files once a month. At some point, COOPER put PAGLIANO in contact with 
rom the USSS for a reason unknown to PAGLIANO.| |told PAGLIANO to 

tbound filtering of email traffic. 


(U// FOU O- ) The back-up hard drive and mailboxes on Exchange server 1 were not encrypted. 
PAGLIANO wanted to move toward two-factor authentication using an RSA authentication server for all 
Remote Desktop Protocol (RDP) access on Exchange Server I because he thought it was a good practice. 
As a test, PAGLIANO installed it on his workstation, as well as COOPER's, but PAGLIANO did not end 
up implementing two-factor authentication and did not turn off RDP access. PAGLIANO stated there 
were no security breaches on Exchange Server 1, but there were a lot of BFAs. PAGLIANO knew the 
attempts were BFAs instead of users forgetting their passwords because the user names in the BFA 
attempts weren't even close to any legitimate user name PAGLIANO could not recall a specific country 
that would attempt an inordinate amount of BFAs. 
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(U/ /FOUO ) In summer 2009, PAGLIANO noticed an account on Exchange server 1 called “H.” 
PAGLIANO asked COOPER who this email account belonged to and COOPER stated it belonged to 
HILLARY CLINTON. PAGLIANO assumed the account was a personal email account. PAGLIANO 
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recalled the email account to be HDR22@clinior;en;aiI.com . Later, after SYDNEY BLUMENTH AL's 
email account was hacked, HILLARY CLINTON'S account changed to HRGDl9@clintonemail.c-om . 


(U//F0W©) In summer 2009,[ 


]and[ 


both Information 

Till 


Technology Specialists at the DOS, contacted PAGLIANO and asked him to come to the 7 floor in DOS 
Headquarters. Once there, PAGLIANO was asked if he was aware of the clintonemail.com domain and 
PAGLIANO replied in the affirmati ve. PAGLIANO recalled nothing fur ther about this encou nter. 


PAGLIANO relayed this incident t(£ 


and 


had a 

1 reached 


“visceral” reaction and didn't want to know anymore. In late 2009 or early 2010,_ 

out to PAGLIANO again and relayed to PAGLIAN O that the use o f a private email server by HILLARY 
CLINTON may be a federal records retention issue. I I relayed to PAGLIANO that he wanted 

to convey this to HILLARY CLINTON's inner circle, but could not reach them and asked if PAGLIANO 
would relay this information. PAGLIANO then approached CHERYL MILLS in her office and relayed 
concerns regarding federal records retention and the use of a private email server. 


PAGLIANO remembers MILLS replying that former Secretaries of State had done the same thing, to 
include COLIN POWELL PAGLIANO thought he may have also mentioned the federal re cords retention 
issue with JUSTIN C OOPER. Additionally, PAGLIANO recalled a third conversation with£ 


where]_^brought up security concerns and stated that email transiting from a s tate.gov 

account to Exchange Server 1 should be through a Transport Layer Security (TLS) tunnel. I 
stated to PAGLIANO that he wouldn’t be surprised if classified information was being transmitted. 


b6 

b7C 


(U// FOU O) PAGLIANO stated the hardware used for Exchange Server 1 was paid for by the 
CLINTON family and through the 2008 presidential campaign and at least some of the hardware was 
acquired through US21 Computers. PAGLIANO believed most financial and acquisition matters 
regarding the CLINTONs would go through COOPER directly. PAGLIANO performed work for the 
CLINTONs without a contract and through contact with COOPER COOPER wanted to do work under a 
retainer, but they settled on an hourly wage. 


(U/ /F0U6 ) In June 2011, PAGLIANO travelled to Chappaqua to perform maintenance and install 
new upgrades to Exchange Server I. The discs began failing in the 3 TB external hard drive in Exchange 
Server 1 and PAGLIANO replaced it with a CISCO NAS storage device. PAGLIANO chose CISCO 
because they make good products and he may have consulted US21 Computers as well. PAGLIANO 
allocated more than half of the storage space for back-ups of Exchange Server 1 and the rest for file 
storage. When uninstalling the 3 TB hard drive and installing the CISCO NAS, PAGLIANO did not move 
the contents from one to the other. PAGLIANO simply unplugged the USB connection for the 3TB hard 
drive and pointed the server back-ups toward the CISCO NAS PAGLIANO also added memory to the 
Dell PowerEdge 1950, added a Gigabit switch, upgraded to a CISCO ASA 5500 firewall, offloaded 
syslogging to the CISCO NAS, bought a CISCO botnet filter and CISCO Intrusion Prevention Service 
(IPS) and replaced the batteries on tne UPS along with other various upgrades and maintenance. 
Additionally, PAGLIANO ungraded the BES from 5.0 to 6.0 and checked for any software patching. 
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(U/ /FOUO) In the Winter of 2011, the Internet Service Provider (ISP) providing internet service to 
the CLINTON residence in Chappaqua went down due to a storm. As a result, Exchange Server 1 was 
unable to process email. While the Internet was down, and to ensure email delivery, PAGLIANO advised 
COOPER to change the mail exchanger (MX) record for email accounts on Exchange Server 1 to point to 
Google. PAGLIANO wasn't certain if COOPER did this or who it was done for, but assumed it was done 
for HILLARY CLINTON and HUMA ABEDIN since they were the most concerned about lack of email 
delivery. 


(U/ / F QUO ) Individuals with an email account on Exchange Server 1 could log into their account 
through any means available to them PAGLIANO viewed his responsibilities as maintenance and 
operation of the server. PAGLIANO recalled HILLARY CLINTON used a BlackBerry as a mobile 
device, but could not recall the various handsets. PAGLIANO met with MONICA HANLEY at some 
point in 2011 or 2012 to configure a BlackBerry for HILLARY CLINTON, but could not recall any detail 
about the device. 


(U/ / FO UO) Upor J fa eaving the CLINTON' S employ a nd pursuant to a request fron{ 


PAGLIANO recalled doing an export of 40 Gigabytes of( 


email. This is the only export 


PAGLIANO could reca ll doing. PAGLIANO believed he may have done an export of email for 

but could not recall. PAGLIANO did recall doing an import of DOS contacts for 


HUMA ABEDIN onto Exchange Server 1 
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(U// FOU Q) PAGLIANO could not recall accessing the content of email on Exchange Server 1 and 
was never aware of any classified information residing on Exchange Server 1. 


(U//F OUO )~tP early 2013, PAGLIANO recalled the user limitations and reliability of Exchange 
Server 1 prompted discussions to search for anot her vendor to manage a CLINTON email ex change 
server. PAGL IANO recalled a conversation with l l and COOPER about I 

Ic areer aspirations and what email requirements she may need. Eventually, MILLS and_ 

_|weighed in relating to Exchange Server 1 and the end of H ILLARY CLINTON's tenure as 

Secretary of State. At some point, an individual named l I beuan the proc ess of fin ding a 

vendor to manage a new CLINTON email exchange server. PAGLIANO did not kn ow| 
previously, or how she came to be involved with the search for a vendor Eventually ] I showed 

PAGLIANO a presentation detailing three vendors and their capabilities PAGLIANO recommended a 
company calle d Platte River Networks (PRN). Ultimately, PAGLIANO recalled the decision being with 
and she chose PRN 


(U/ /FOUO ) Once the decision was made to go with PRN, PAGLIANO recalled communicating 
with PRN employee ! I related to the transition from Exchange Server 1 to the server 

PRN was going to use. Around this time, PAGLIANO was already 4 to 5 months into a new job as an IT 
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specialist at GARTNER PAGLIANO gave ! I administrator access to Exchange Server 1 as 

well as user na mes and passwords to indi vidual email accounts. P AGLIANO recalled talking to 

_once or twice and possibly ] - | In order to prepare Exchange Server 1 

for the transition to PRN, PAGLIANO also "trimmed” mailboxes and cleared out white space. 
PAGLIAN O describe d this as a maintenance process of reclaiming space from old mailboxes, like in the 
example of_ 


(U/ / F OUO ) Based on conversations he had or was aware of, PAGLIANO recalled knowing that 
PRN was going to use a DATTO service for backing up their server, a CloudJacket device for network 
protection, and potentially, two-factor authentication. ! ~| was responsible for establishing the contract *>6 
of services PRN was going to implement and ensure they were implemented. b7 ' 

(U/ /FOUO ) PAGLIANO was shown an email dated January 30, 2014 where a user list was 
populated by Platte River Networks regarding their management of a CLINTON email server. Regarding 
the email, PAGLIANO did not recognize the mailbox “HRC Archive.” PAGLIANO stated after PRN 
took control of managing an email server for the CLINTONs, he had no visibility into the server or the 
mailboxes. 


(U//F0B0) In what PAGLIANO remembered as the fall of 2013, MILLS called PAGLIANO and 
inquired about the effectiveness of two types of software for wiping computer data, but PAGLIANO 
could not recall the names of the software. PAGLIANO discussed the difference between “bit” wiping 
and deleting with MILLS. PAGLIANO inferred from his conversation with MILLS that PRN was going 
to excise data. PAGLIANO recalled using Boot and Nuke software when deleting and repurposing 
computers while working on HILLARY CLINTON's 2008 presidential campaign, but didn't recall if he 
discussed that with MILLS. 


In July 2014, PAGLIANO had a conference call with MILLS and 


to 


discuss an archive of HI LLARY CLINT ON emails from her time as Secretary of State. PAGLIANO 


recalled that MILLS and 


were trying to determine why a gap existed in HILLARY 


CLINTON'S emails between January 2009 and March 2009. In separate conversations with COOPER, 
PAGLIANO understood that CLINTON used a BlackBerry email address before hosting her account on 
Exchange Server 1 and that explaine d the gap from January 2009 to March 2009. PAGLIANO could not 


recall a conversation with MILLS or 


after July 2014. 
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(U//F0UO) In Spring 2015, MILLS asked PAGLIANO if he would mind talking to DAVID 
KENDALL from Williams & Connolly LLP. PAGLIANO agreed to talk to KENDALL and described the 
interaction as a shorter version of PAGLIANO's conversation with FBI agents as memorialized herein. 
PAGLIANO stated there is nothing he told KENDALL that he didn't also relay to the interviewing FBI 
agents. 
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(U//TOUO) At this point in the interview, FBI agents displayed documents to PAGLIANO that 
were Bates stamped as an identifying mark. PAGLIANO was asked questions as it pertained to each 
respective document. The following was provided by PAGLIANO: 

(U/ /FOU O) After viewing a document marked HC-001, PAGLIANO stated the credit of 
$5,000.00 to his account was a payment, including expenses, for his work in March 2009 setting up 
Exchange Server I. The payment of $8,350.83 in June 2011 was for his previously described maintenance 
work on Exchange Server 1, to include expenses. 

(U//FOUO) After viewing a document marked HC-014, PAGLIANO stated the line item 
“1/11/2011 Conference call with Security team” was the pre viously described communication with 

~| related to outbound filtering. PAGLIANO stated l I was an individual he worked with at 
US2I Computers. PAGLIANO recalled HILLARY CLINTON turned off Bluetooth capability on her 
BlackBerry, while COOPER, and possibly |~ [ enabled Bluetooth on their handsets. 

_ (UZ/ rO TO PAGLIANO stated | ~| referred to in a document marked HC-023, was | | 


(U/ FQU Q) After viewing a document marked HC-008, PAGLIANO stated the “Mailbox kick off’ 
indicated in the invoice was related to the previously described work exporting f | mailbox. 

(U// F0U 6) After viewing a document marked HC-004, PAGLIANO stated the iPad referred to in 
the invoice belonged to HILLARY CLINTON. PAGLIANO did not configure the iPad and could not 
recall when HILLARY CLINTON started using it, nor any other details related to the iPad. 

(U/ /FOUO ) After viewing a document marked HC-010, PAGLIANO stated in March 2013, 
MILLS requested an analysis of Exchange Server 1. PAGLIANO recalled giving Exchange Server 1 a B+ 
grade and conveyed in his analysis the limitations of Exchange Server 1 and recommendations for a more 
robust email system PAGLIANO relayed the greatest liability of Exchange Server I to be reliability and 
referenced the incidents in which the ISP lost power and was unable to provide internet service to the 
residence in Chappaqua. PAGLIANO had always been against housing a server in a residential basement 
and preferred the security and reliability of an established data center. MILLS did not have an email 
account on Exchange Server 1 and used state gov and gmail for email exchange. 


(U//F©t}0) After viewing a document marked HC-002, PAGLIANO stated the virtual private 
network (VPN) referred to in the invoice was not for users of Exchange Server 1 and just for 
administrator use. PAGLIANO stated he installed the IPS at the same time the CISCO ASA firewall went 


in place in June 2011. PAGLIANO fine tuned the IPS over time, fluctuating between turning logging on 
and off as needed. 
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(U//FOU6) The notes of the interview and all aforementioned documents displayed to 
PAGLIANO will be stored in a FD340 envelope and filed with the captioned investigation. 
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(U// FOUO ) On June 21, 2016, BRYAN PAGLIANO, was interviewed 


tele 

phonicallv bv Federal 

Bureau < 

of Investiaation (FBI) 

Special Agents 


(SA) 




|and Information Technology 

b6 

Specialist/Forensic Examiner 1 


Also on the call for the 

b7C 

interview were AkinGump attorneys 


_1 Partner. 

Connor Mullin, 


Counsel, Mark MacDouctall, 

Partner 

and 1 


Additionally, 



from the U.S. Department of Justice was also on the 


call. After being advised of the identity of the interviewing Agents, 
and the nature of the interview, PAGLIANO provided the following 
information: 

(U// FOUO ) PAGLIANO did not work on the Apple email server, 
set-up by JUSTIN COOPER for WILLIAM CLINTON aides, and therefore, has 
no information regarding a Secure Socket Layer (SSL) certificate 
registered for the Apple server. PAGLIANO did go through the "full 
registration" process for establishing an SSL certificate on the 
server he later built, which enabled email to be encrypted while in 
transit. 


(U/ AEQUO ) Based on a request from COOPER, PAGLIANO built an 
email server in early 2009 in HILLARY CLINTON'S 2008 presidential 
campaign space on K street. PAGLIANO could not recall the exact 
address of the building. Once built, PAGLIANO rented a minivan and 
drove to Chappaqua, New York to install the email server in the 
CLINTON residence. PAGLIANO could not recall any existing computer 
systems at the Chappaqua residence, other than the Apple server 
previously described to the FBI. when designing the network for the 
server, PAGLIANO left the CLINTON'S home internet network separate 
from the server - leaving it outside his firewall. 


b3 

b7E 
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(U//-F QUQ ) PAGLIANO recalled being given a list of user names 
and passwords that COOPER asked to be transferred from COOPER'S Apple 
server to PAGLIANO's system. PAGLIANO did not recall transferring an 
account for HILLARY CLINTON and does not know how her account was 
installed on the server he built. PAGLIANO installed an IP-based 
printer on this email system with the express intent of allowing the 
CLINTON office in Harlem to print at the Chappaqua residence. PAGLIANO 
installed regular updates to software on the email server using "auto 
patching" every night. PAGLIANO did some work to experiment with two- 
factor authentication, but did not implement it on the server because 
it would have been difficult to administer. PAGLIANO changed the name 
of the built-in Administrator account and eventually disabled it. 


(U/A FOU Q) PAGLIANO could not recall saving a file called 
"netstat.txt" Whe n PAGLIANO rec eived a recommendation to do outbound 
IP filtering from | |at the United States Secret Service, he 


implemented the change. 


(U/ /F0U0 ) Around January 2011, PAGLIANO recalled a brute 
force attack (BFA) on the server where COOPER was receiving failed 
log-in attempt notifications on his email. Because COOPER could not 
reach PAGLIANO, COOPER "panicked" and shut down the server. PAGLIANO 
recalled nothing abnormal about this BFA and eventually trained COOPER 
to insert IP blocks. PAGLIANO made it clear to COOPER he could not 
administer the server on a day-to-day basis. 


(U//-F QUC r) After a recommendation by 


an 


employee at STATE DEPARTMENT (hereafter, STATE) to implement Transport 
Layer Security (TLS) between the CLINTON email server and STATE 
servers, PAGLIANO did not implement TLS. PAGLIANO understood the 
CLINTON email server to be a personal email server and did not see a 
reason for encryption. 


b6 

b7C 


b6 

b7C 


(U//-F OUO ) In early 2013, PAGLIANO found emp loyment at 

GAR TNER and convers ations began between CHERYL MILLS, _ 

and |_| pertaining to hiring a third-party company to 

administer a CLINTON email s erver. PAGLI ANO could not recall when he 
gave access to his server to | 


: PRN) 


Once PAGLIANO did grant access to 


~1 from PLATTE RIVER NETWORKS 


PAGLIANO did no 


utility work on the server and was not monitoring it. Although he 


b6 

b7C 
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could not remember a specific date, PAGLIANO believed the last time he 
accessed the server was around March of 2013. 

(U/ / - FOUQ . ) Notes of the interview will be maintained in a FD340 
envelope. 
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(u/ffeyg) 


Investigation (FBI) Special Agents (SA^|_ 
explained the interview was voluntary andL 


kvas interviewed in her office at the! 


Washingt o n D.C., by Federa l Bureau of 

nd | Interviewing agents 


b6 

b7C 


iould stop the interview at anytime. After 


being advised of the identity of the interviewing agents, and the nature of the interview,] 
provided the following information: 



b6 

b7C 


(u/ zro se) 


[participated in daily 8:45am meetings with the Secretary of State and 


her execu tive staff CLIN TON was not always present at said meetings, as she traveled quite a bit. 
However, [ I assessed she attended meetings wherein CLINTON was present approximately 

three to six times a week when CLINTON was in town. 


b6 

b7C 


(U//F©W©,i 
DoS employment 


until six to eight months after she began working at DoS( 


_jdid not have a relationship with CLINTON prior to|_ 

{reported directly to C LINTON, but did not email CLINTON directly 


[was not initially provided 


CLINTON's email address, so when she wanted to send or forward a message to CLINTON, she would 
rout e it through HUM A ABEDIN At some point in the first six to eight months of her employment at 

Irecall ed CLINTON responding to one of the messages she forwarded up directly. At 


b6 

b7C 


DoS,| 
this point. 

“privilege.” i _ 

used lightly. While^ 


i sked ABEDIN if it was okay to go direct with CLINTON, and was granted the 
[explain ed the privilege of emailing CLINTON direct was not a privilege she 
did not have a history of Government Service, she thought it was 


normal for someone in CLINTON's position to have a “gatekeeper system” in place. 


Investigation on 12/16/2015 
File # I 


1/02 


at 


Washington. D C. 


Date dictated 


N7A 


b3 

b7E 


By Sa£ 


-MI 


b6 
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and its contents arc not to be distributed outside your agency. 
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(U/ /FOUO 


could not recall if the emails she d irectly sent to and from CLINTON 


were on CLINTON's DoS or privat e email account 
actual email address. Rather, when! 


recalled seeing a single initial. 


,_,did not recall seeing CLINTON's 

Jreceived or responded to emails from CLINTON, she 


when she received direct CLINTON emails during her time at DoS, as 
executives would refer to CLINTON as “S.” 


believed she recalled se eing “S” as the name of the sender 

and other DoS 


noted that although she is no longer at DoS, 


she still maintains email c ontact with CLIN TON and now receives emails from CLINTON where the 
name of the sender is “H ” 1 ~l had no knowledge CLINTON was using her own private 

server until it was reported in the media 


(u/ /rou e£ 


held a Secret clearance while she was at DoS, but rarely worked in the 

_| received access to and tr aining on the use of DoS' s classified 

computer systems, she hardly acc essed DoS' classified system. | bid not rec all ever using 


classified realm. While 


her DoS classified email account f 


been more likely to use his D oS classified email account 


assesses 


* 


1 would have 


almost entirely worked off the DoS' classified system 


(U/ /FOUQ 


}vas asked to review an email dated 9/12/2009 wherein 


sent an email titled “For S - for discussion on Afghanistan tomorrow,” from her unclassified DoS email 
account to CHERYL D. MILL S and JACO B J. SULLIVAN's unclassified DoS email accounts. 

lwere carbon copied on the email. While reading through the 


ABEDIN, and 


email |_ 


the email was 


at one point stated “ good Lord.” and further stated that the information contained in 


writing 


was also referenced in the first line of the email). 


(U//Feuej[ 


_pid not recall specifically sending the 9/12/2009 email to MILLS and 

SULLIVAN, but mentioned she would not have known the information contained in th e hodv of the 

email. There Afghanistan Review was ongoing at the time of the 9/12/2009 email, and_ 

recalled str ong confl icting opinions c oncerning the role corruption played in th e Afghan politica l strategy. 


]ikely 


senti 


have edited before sending to MILLS and SULLIVAN . 


jthe information in a separate em ail, which|_ 

Jikely spoke to) 


hvould 


phone or in person about the matter before 


emailed the information td 


_pn the 


(U/ /FOUO ) After reading the 9/12/2009 email j 
when she read over the paragraphs labeled #5 and #6.” 1 ~ 

extent she read.. thought through carefully” before she sentj_ 


admitted she was a bit “shocked 
jstated she “wondered to what 
_|email on to MILLS and 


SULLIVAN. SULLI VAN had no idea what was meant by “Maija” Op as stated i n the paragraph #5, but 


explained she believeq 


was proposing ideas rather than revealing them. 


went on to say she wouldn't have recommended kinetic action. 


further 


b6 

b7C 


b6 

blC 


b6 

b7C 


b6 

b7C 


b6 

b7C 
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(U/ /FOUO _ | _ and I I have known each other f or many yea rs. 

father was a mentor tol 1 At the time of the 9/12/2009 email.l Iwa: 


kvas workina for 


labout a varietv of issues, aa 

likely viewed! 

Has a back channel to 

get information to CLINTON. 

_ described] las a 

“bold thinker.” 


saw her role as ensuring CLINTON received a wide range of viewpoints on various topics. 


(U//FOUO) Agents also asked 


if she recalled a 6/3/2011 email she sent regarding a 


hacking of Google email accounts, in which she recommended using the informa tion as a platform for 
discussing issues with the DoS Information Technology system ! [ immediately 

remembered the email and explained she initially thought it was why the FBI wanted to speak with her. 


(U//F©«e)[ 


did not recall be ing advised or instructed against using a personal 


Jused her DoS assigned Blackberry. However, she was 


email account or personal devices, 
assigned a DoS Dell computer, which was very dated, so she opted to use her personal laptop when she 
was o ut of the office.) ~K vas also issued a fob for which to remotely sign onto DoS systems. 

While ! 


did use the fob on occasions to re motely sitzn into th e DoS syste m she explained 

]who resides in 


t he sys tem was slow and would shut down w hile in use f 
would often sign into and work off of[ " 


network from her home, and transfer 


information she needed back over to DoS systems. 

(U/ /FOUO ) SULLIVAN was always operating off of his DoS Blackberry, so 
doubted he ever used a personal accoun t for DoS business. However, MILLS would sometimes send very 
early morning e mails to 


believed was 


(around 5am) t hat were sent from a personal Gmail account 


gmail.com 


Jcould not recall the specific 


content of emails she received from MILLS' personal email account, but believed their content was 
mainly instructional. 


(U//F©«e£ 


|could not recall an instance where a conversation (email or otherwise) 
was moved from an unclassified to classified space. It would be more common for a conversation to turn 
“confidential” and the circle of participants would dwindle in size to accommodate sensitivities, rather 
than change the venue of the conversation. 


(U//F©U©)[ 


opined that most policy and strategy discussions would be considered 


unclassified, acknowledging that some of the participants in policy and strategy discussions may have 
additional details concerning sources and methods that would have come from classified channels. 


(U// FQ U Q ) At the conclusion of the interview! 
the interview to CLINTON or any of contacts from DoS. 


Jold agents she had not mentioned 
further asked if she was allowed 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 
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to tell SULLIVAN and/or CLINTON she spoke with the FBI, and explained she was concerned they 
could be upset to learn she sno ke with the FBI without telling them. Agents expl ained that while they 


from referencing the interview, they would prefer 


cannot prohibi 

discretion when discussing the matter, as to prevent unnecessary information from leaking into f 


use 

fie press. 


(U/ /FOUO 


was not previously interviewed by DoS or any other entity related to 


the topics discussed during this interview. 



Agent notes are maintained in a 1 A. 
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(U/ /FOUO ) On February 18, 20I6,|_ 

Federal Bureau of Investigation (FRTl Snerial Aoentsl 
off ces of]_ 


1 ooef 


were 


and 


was interviewed by 

at the law 


Toff 


Washington DC Also present for the interview 


and Dep artment of Justice (DoJ) 
After being advised of the 


T 


Counterintelligence and Export Control Section | _ 

identities of the interviewing agents, and the purpose of the interview, ! "[ provided the following 
information: 


(U//F©H©)In 2013, 


] founded 


Twhere he co ntinues to serve 



[ and 


also served in various 

positions onr 1 


(U//FOtfO] | Icoordi nat ed frequently with officials from the Dep artment of State (DoS) 
during his tenure at both t he! landl II Icoordinated with DoS 

weekly while at h e was at 
DoS on all levels 


_Jfurther stated there was close coord ination between the | | and 

coordinated more frequently with DoS during hi j | tenure, as it was 


necessary to coordinate with DoS on everything that happened “down range. 
(U// FQUO )! 


MILLS 


directly with 


primary DoS contacts while he was b oth at [ | and | j included CHERYL 
I and JACOB SULLIVAN I l also occasionally comm unicate d 
and some U S Ambassadors when he was assigned to | I 


email. 


[contact with DoS while at both | l and l I was via telephone or 
[had cla ssified a nd unclassified telephones and email systems available on his desk at both 


(U// FO UO ) Most of] 


1 l and j | When [ sig ned on to his co mputers at | [ he was directed to a classified network 


and would have to switch over to)_ 

open/unclassified system, whereas whenjj 


defaulted to the unclassified network. 


[unclassified net work i 
signed on to his [ 


'he wanted to communicate on an 
computer, the system automatically 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


(U//FOUO) | ] could not recall what email account w as synced to his ] | issued Blackberry. 

Blackberry while at | | was synced to his unclassified 


account. 
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(u/ffetjej [was provided a STE and safe for home use during his j | tenure. 


explained that he did not utilize the safe to store documents, but occasionally used the STE. 


did 


not leave the STE plugged in at all times, rather he would wait for someone to contact him on an 
unclassified line and request a secure call from his home before he would physically plug in the STE. 


(U/ /FOUO) [ 


with then Secretary of Sta te HILLARY CLINTON, andf 


~| he attended weekly lunch meet ings 


and CLINTON also met regularly at National Security Council (NSC) Principal 


Committee (PC) meetings while 


with the CLINTON family, as he served as President WILLIAM J. CLINTON's. 
1990's. 


in the 


b6 

b7C 


b6 

tolC 


(u//Eeue£ 


Jnever emailed directly with CLINTON. He was not aware of the email 
account CLINTON wag using, npr wag he aware that her email account wa^^ahim off of a private 

server. According tcj___|would not have 

utilized email as a mea ns to com municate with CLINTON. If ] | wanted to contact or convey a 


message to CLI NTON, 
SULLIVAN, or 


I would subsequently contact the aforementioned DoS senior staff (MILLS, 


to relay the appropriate information. 


b6 

b7C 



(U// FOUQ ) Agents asked 
1 The email was sent from!" 


receive from 


[to review an email dated 12/30/2009 and w ith the sub ject line 
to CLINTO N, and referenced information! Jclaimed to 


b6 

b7C 


email and r emembered! 


After reading the email,! [explained he recalled the incident referenced in the 


when the incident occurred. ! [ recalled being contacted by an Executiv e Assistant (EA) 


La st Name Unk nown (LNU) who repo rted the incident in Afghanistan. 


subsequently 


• \ / ■ r i i * J 

Jwho requested_notify the Presid ent, Vice President, Chairman of the Jo int 


contacted 

Chiefs of Staff, Secretary of State, and Secret ary of De fense 
contained some anecdotes about the incident. could not recall if he received the information from 
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I | LNU via secure phone (STE) or o n an open line. | | could not recall the specifics concerning 
how he relayed the incident to l ~1 but stated most of the calls he made that day concerning the 
incident were likely on an unclassified line due to the emergency of the situation. He described his role in 
the call as contacting his counterparts to relay a brief syn opsis of the incident with the caveat that his 
counterparts should “give their boss a heads up.’ l I further explained he may have participated in 
follow up calls on the STE, but could not say for sure either way. 


_(U//FOUO) Agents also showed|_|an emai l exchange dated 2/ 10/2010 w ith the subject of 

I em ail.” In the email cha in SULLI VAN contac te l to ask for | | email address. 

[ replied that | | email w as ] l@Rmail.com. Thereafter. SULLIVAN asked if this 

email acc ount wa s the one that l l used for work and l Jconfi rm ed that it was. After reviewing 

the email, ! [ explained that he primarily used his unclassified ] | an d| email accounts 
respectively for work purposes. However, he n oted th at he m av have used j@umail.com on 

occasions when he could not access his official l | or | [ unclassified emails. 

(U//F6H0) | | reviewed another email dated 11/20/2010 wi th the subject line [ | in 

Israel,” in which he sent the email to SULLIVAN on both_ <2>«mail.com and SULLIVAN' s 

DoS unclassified ema il account. Also on the receiving line of the em ai were ! and 

[ via their “nsc.eop.gov” email accounts. | could not recall why he would have 

sent the emai l to SUL LIVAN'S gmail account, but stated he would normally email SULLIVAN via his 
DoS account , r I d id not recall ever receiving instruction fro m SULLI VAN or any DoS employe e 

regarding contact on a gmail account rather than their DoS email. | listed both his_and 

@gmail.com accounts at the bottom of the email because it provided multiple means for people to contact 
him while he was on travel in the event his work email was not available. 


(U// FOUO) Agents asked l I to r eview a fifth email dated 09/11/2012 and with the subject line 
“Libya.” [Note: The email shown to l | was in a redacted format based on a DoS Fre edom of 
Information Act (FOIA) response to Judicial Watch], A fter reviewing t he redacted email, | | 

explained there was a series of me eting on 9/11/2012 in_ office concerning the events 

surrounding Benghazi. The email | | reviewed referenced whatl Ire ferred to as a deployment 

meeting. There are three types of deployment meetings according to|_1. Deployment orders, which 

is the standard process of determining who needs to go where 2. “Careful hurry up deployment,” which 
takes place over the course of a couple of days and is quicker than the standard process 3, “On t he fly 
quick reaction” deployment, which is used only in emergency situations. The only time I could 
recall the “on the fly reaction deployment” happening was after Benghazi 


am Green on Blue,” [1 
response]. I 
referenced said email 


[ was asked to review a sixth e mail dated 10/30/2012 with the subject line “This 
Note: The email shown td Kvas in a redacted format based on a DoS FOIA 


responses 


til 1 [explained he sent the email to rapidly coordinate the Public Affa irs 

_|and DoS in regards to the incident referenced in the em ail and 

were the respective Public Affairs contacts at DoS and | | 
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b6 
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(uz/FOue 


b6 
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(U//FOUO) In response to the article]" 


However, ! [ stated that he did not say the 


b6 

b7C 


7 


ecause he did not even know if that statement was true 


during his tenure at either | or | | 


bl per CIA 
b3 

id not have any concerns regarding how DoS handled classified information 


b6 

b7C 


(U//FQU0) ! [ indicated he would be available for re-contact if needed. 

_ b6 

(U//FOW6) A copy of the original interview notes and the referenced emails and article are b7c 

attached in a 1A envelope. 
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i.'iis\muiuiu>!l olf-lMtl* uC_ Injury ii-« of 


.On «} 5 'l‘i? 201 fi. Pace 


v. 


as shown a conv of an email from_ 

After reviewing the email he provided that Iwnearcd to be 


with the subject ] 

lmm io coordinate with DOS hut that the em ail should have been classified 


n [was shown a copy of an email frorq_ 

J\!ter reviewing the email he provided that the eiitaiLshmiiil.be 


with the subject 

classified but that he was not surprised that DOS had sent it on an unclassified channel.{_|further 

noted that the DOS unclassified email system had previously been penetrated by a Ibrcign adversary. 


^illU,lie-aiibkc£ 


kv as shown a c opy of an email Iron;_ 

~ter reviewing the email [ b ated that his true name, and that of 


should not have been included in an unclassified email. 


_|providcd that talking points could he classified or unclassified. They were conveyed from the 

CIA to DOS via a cable that included a tear line below which the approved talking points were provided. 


with the subject! 


was shown a cop y of an email from 


stated that he did not know enough about 


included in the bodv of the email were classified or not. 


jAlter reviewing the email 
Jo assess if the talking poi 


points 


___ Vvas shown a copy of an email from] 

I with the subject | After revieyiiiu-lhtTcinnill-brovidcil_Llial_am_c 

_khmila he. umsidcruu dassififidJ_ 


tseussion oil 



Ivith the subje ct 


_Iwas shown a conv of aq email Irom| 

AI ter teviLAvinu ihe emaiill 


provided that the details 



_ ____ | c oncluded the interview by stating that DOS has 

shown'an increased tendency to communicate via email, lie believed that they did this for simplicity, to 


a vo 


id unauthorized disclosures .such as 


“back .channel’' discussions 


Wikileaks, and to prevent other USG partners from seeing their 
Lontimied io say that the personnel at DOS were experienced and 


knew that this information was classified. However, they did it anyways and their actions hurt the CIA 
and other agencies whose equities were conveyed in the emails. 
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(U/ Yi'OUO) A copy of the original interview notes and referenced documents is enclosed in a 1A 
envelope. 
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FEDERAL BUREAU OF INVESTIGATION 


Mate oi tran:«tiptiii!i .. 


(U//1We) On March 17. 2016. MICHAEL MOREL1 

mit-ivii-w fii bv Federal Bureau of'Investigation lFBI) Special Agenl^ 
,al the FBI Washi nmon Field Office. 6 01 4* Street NW. Was) 


Attorney at 1 .aw 


Z 


was 


and 


It inn ion DC. Present for the interview 


agreed to sign a non-disclosure agreement in anticipation of viewing 


was MORHLI.'$ counsel 
Prior to the interviewl 

classified documents during the interview. After being advised of the identities of the interviewing agents 
and the purpose of the interview. MORELL provided the loltowing information: 


(U/ /FQUO ) MORELL joined the Central intelligence Agency (CIA) in 1980 as an analyst and 
served in a variety of roles of increasing responsibility before he was named the Deputy Director (DD) in 
2010. MORELL was the DD from May of 2010 until August of 2013, during which he served as the 
Acting Director on two occasions. The first time was in 2011 when LEON PANE 1 PA left and the second 
was in laic 2012 when DAVID PETRAEUS resigned. 


(U/ /FOUO) As DD. MOREL!, had regular interaction with the Deputy Secretary of State 
WILLIAM BURNS during the daily Deputies meeting at the White 1 louse. MORELL would also attend 
meetings at the Departm ent of Stale (DoS), or have secure telephonic conversations, with BURNS or 
1 to discuss inter-agency affairs. MORELL never communicated directly with the 
Secretary of State (Secretary). 

(U Pt'OUB ) MORELL did not recall ever having direct communications with JAKE SULLIVAN, 
because SULLIVAN did not attend the Deputies meeting. Nor did he have direct communications with 
CHERYL MILLS or 11 LIMA ABED1N. 


(U// HOUO ) MORHLI.. never emailed the Secretary directly and had no knowledge that she was 
using a private email account and server. 
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' iii«i»»:iitiii! nfi-'iMO? »!'_ liHi-rvii-w ol'Miciiaei Ml no 11 


On 03/1 7/201 fa 1-Mt-y .) 


MORI-1.L staled thul he understood why the email would be considered classified bui he did not believe 
that the u*mail would jeopardize any sources, methods, or otherwise compromise national security. 


bl per CIA 
b3 


t'S/i M 0 R K L L. was si town a copy of an email chain from 


vilh the 

ctshiiM'J 

MORKLL stated that he did not rec; 

ill the cited ailielt 



1 Mori- 

.L staled that assuming the email was true, then it would he classified 






(S//Nf*) MORI-U.. was shown a copy of an email chain from April of 2011 with the subject “Scots 
police. UK govt to meet over Libyan defector (Reuters)." MORELL recalled the matter referenced in the 
email and provided the following context: At the time of the email the Libyan Civil war was raging and 
MILAM MAR GADDAFI was still in power. Part of the U.S. strategy at that lime was to induce the 
defections of high ranking officials from Libya. In the email chain BURNS expressed lhai MUSA- 


.h.L>L;.ASA.xhunld-!)Cticaic^^ delect ionsf 


content iselassilied because 
.MORI-LI. did not fee! that i 


b.uLlhat.lllc..LiA.w\>ukl say that the 


xi lu say uv 
I lowever. 
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□3 ith the subject 


tc disclosure of this information would cause “horrible” damage. 

VtORELL was shown a copy ofe mail chains iron J 


JMth the subject]_ JmORLLL stated that the email dijpmct 

'ur.-.l io be classified as it is absolutely clear that they are referencing_ 

Ml 




hail that ii 


bl per CIA 
b3 


spoke with BURNS uboua 


as he never 
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~].V10Rl -l-L was shown a copy of an email chain from 


discussing! 


jvlORHl.L stated that i! was clear lhai they were 
jMoRI'Ll. believed that the email was classified as it discussed 


bl per CIA 
b3 


operational activities. V fQRELL initially staye d that the content of the email did not “give much away” 


but he conceded that the 


% 


nformation could potentially be damaging to the operation. 


_with the subjec t _ 

MORliLL suited that it was clear that they were discussing^ 
classified. 


ImORELL was shown a copy of an email chain from| 
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CuittiflUittion o!' i-13-302 of_ iiiim -ii-vy oi' Michael Morel!... On 03/17/201 ft . i'agc __ 4_ 

( U/ tfOU frH MORKLL sui> n ested that the interviewing agents talk with leadership fro m the 

agency’; and with leadership from lhe|_for another 

assessment ol the referenced emails. 


b3 per CIA 


(H//F 8U 44) A copy of the original interview notes and the NDA signed by[ 
enclosed in a 1A env elope. 


j&rsi 
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FEDERAL BUREAU OF INVESTIGATION 


(U// FOU Q) On Septe mber 15, 2015] _ 

Networks (PRN), office phone ! I email address 

Federal Bure au of Investigation (FBI) Special Agent (SaJ^ 
I Also present for the interv iew wasl 
Department of Justice (DOJ) Attorney ! I Afte: 

interviewing agents and the nature of the interview]_ 


Dale of iranscripiion 09/21/2015 

I Project Ma nager. Platte River 

_ _ _wa s interviewed by 

land SA 

| from | l and 

hng advised of the identity of the 
(provided the following: 


(U/ / -F OUO ) I I role with the email server project for WILLIAM CLINTON and 

HILLARY CLINTON, under the account name CESC, involved transporting and installing hardware. He 
did not serve as the Project Manager, his normal job function at PRN His first task for the project was to 
pick up the CESC server and support devices in use prior to PRN being awarded the contract for the 
project. T he server and su pport devices were located at the CLINTON residence in Chappaqua, NY. In 
June 2013 J traveled to Ne w York an d drove a rental car to the CLINTON residence. 

_contact at the residence ] lLast Name U nknown (LNU), escorted |~ I to 

the basement where the equipment was located ! H powered down the equipment and took a 

Dell PowerEdge 1950 BlackBerry Enterprise Server (BES), Dell PowerEdge 2900 email server (hereafter, 
predecessor server), Cisco NSS 324 Network Attached Storage Device (NAS), and an external USB hard 
drive, but left the existing firewall and switch. 

(U// FOU Q) ! I then transported the equipment to an Equinix datacenter in Secaucus, 

NJ where he reconnected the equipment in the same manner in w hich it was con nec ted at the CLINTON 
residence. The goal was to get CESC users back online quickly. I l and |~ 

who was w orking remotely , then started incorporating new equipment PRN purchased for the CESC 
project, but | did not recall if he set it up before or after transporting the server. The new 

equipment consisted of a Dell PowerEdge 620 server running multiple virtual machines, two new 
PowerConnect switches, two new Fortinet firewalls, and a DATTO backup device. During this period of 
time, the predecessor server and new PRN server (hereafter, PRN server) co-existed. The predecessor 
server had the NAS connected, but it did not appear to be configured fo r storing any da ta. The PRN 
server had a DATTO backup appliance connected to it. After 2-3 days, | | departed Equinix 

and did not participate in th e day-to-day management of the CESC account. Those duties were handled 
remotely by | Several days later, a CloudJacket intrusion prevention device was installed by 

technicians at Equinix. The CloudJacket was designed to alert PRN and prevent intrusions into the PRN 
server. 
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Cominuaiion of FD-302 of_ Interview of| _^_. On 09/15/2015 . Page 2 _ 

(U//FOUQ) In or about March 2015, ‘ [ communicated with CHERYL MILLS 

regarding any existing backups of the CESC email server and the state of the p redecessor server. MILLS 

reques ted an audit of t he existing equipment, but did not direct_to delete or alter any data 

found I I traveled to Equinix datacenter in Secaucus, NJ to conduct an onsite review of the 

equipment. PRN had migrated all accounts off of the predecessor server by this time, therefore it 

contained no data. _reviewed the NAS and external USB hard drive brought from the 

CLIN TON residence as part of the initial transport of equipment. Neither contained any data. While 
there, ! ~l also took steps to increase security on the system as a result of media articles 

identifying the existence of the private email server used by the CLINTONS. PRN took these steps 
without direction from CESC. 

(U/ /FOUO) None of the Internet Protocol (IP) notifications!_jreviewed from the 

CloudJacket device used as part of the security infrastructure for the CESC account were a bnormal. All 

were alerts and some resulted in IP addresses being blocked from accessing the equipment. _ 

does not believe any nefarious actors got into the system. 

(U//‘Ff)UO) In or about August 2015 j I traveled to the Equinix datacenter in 

Secaucus, NJ t o turn over the predecessor server to the FBI. Prior to turning over the server, 

I powered on th e server to chec k for proprietary PRN software and license copies of other 
software purchased by PRN. [ recalled removing Magic ISO softw are because it was 

expensive and PRN pays for license fees for each copy it uses. | 1 review of the predecessor- 

server was not requested by CESC. 


(U//EO UO)!_|r lever heard anyone from CESC discuss classified information. 

[ was never asked by anyone from CESC to delete or destroy anything; however, PRN would 
not have knowledge of individual users deleting content from their accounts. 
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Dale of transcription 03/04/21116 


(U// FOU O) On Febru ary 18.2016 


Networks (PRN), office phone 


email addressT 


Federal Bureau of Investigation (FBI) Special Agent (SAj[ 


Project Man ager, Platte River 
Twas interviewed by 


Jand SA^ 


_ i at the offic es of Platte Riv er Networks, 5700 Washington Street, Denver, CO. A lso present for 

the inter view were SAl [information Technolo gy Specialist/Forensic Examiner_ 

I from | l and Department of Justice (DOJ) Attorne>{ 


After being advised of the identity of the interviewing agents and the nature of the interview, 
p rovided the following: 


(U// FOUO ) | [ handled the technical i nfrastructure related to the contract PRN had 

with the Clinton Executive Services Corporation (CESC). I "I ran the day to day 

operations and most direct interactions with the client, including managing and maintaining the Microsoft 
Exchange email server and associated equipment (collectively hereafter, Server). 

(U/ /FOU Q ) In March 2015, the CESC requested PRN conduct a complete invento ry of data 
backups and all equipment in PRN's possession related to the services provided to CESC. 


does not recall how or who from CESC communicated this request. In response to the request, 

I traveled to the Equinix facility in Secaucus NJ where the Server housing CESC's data was 
located. In addition to the currently operating equipment, ! I found a Network Attached 

Storage (NAS) device and an external hard drive that were disconnected. He connected them and 
reviewed for q ontent. but neither contained any data, so he disconnected them before leaving, 
did not find any unexpected backups during this trip. 


(u//F©we> 


Jvaguely recalled the name 


from Security Pursuit, but did 


not know why it was famili ar to him. He d id not recall implementing any new security protocols in the 
March 2015 timeframe, bud Idid conduct a high level security check of the Server. 


(U/ffOW 


did not recall a backup device of HILLARY CLINTON'S connecting 


via IMAP/SMTP to the Server 
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(U/ /FOUO) 


never deleted, nor was he asked to delete the mailbox “hrcarchive” from 
the Server He never discussed deleting co ntent, creating p st files, exports, or shredding of pst files with 

_or anyone else. Additionally .! lis unfami liar with a program called BleachBit. 

However, prior to turning over the Server to the FBI. ! R emoved PRN system tools such as an 

ISO mounter and, possibly, a monitoring tool from Level Platforms or LabTech. 
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On June 10, 2016, JOHN BENTEL, 


_ | _ i _ was inter viewed 

by Fede ral Bureau of Investigation (FBI1 Special Agent sf and | [ at the 

office of _ _ [ Washin gton DC. Pres ent for the interview was 

B ENTEL's couns e l I Partner | Partner, and | I Special Counsel. As well 

from the Departm ent of Justice (DoJ) Counterintell igence and Export Control Section. 
Prior to the interview BENTEL was l I After being advised of the identities 

of the interviewing agents, and the purpose of the interview, BENTEL provided the following 
information: 


(U//FOU0) BENTEL served at the US Department of State (DOS) for 39 years before retiring in 
2012. Most recently, BENTEL was the Director of the Executive Secretariat Information Resource 
Management (S/ES-IRM) from 2008 until 2012. In this position he reported to LEWIS LUKENS and 
then to TULINABO (T ULL MUSH1NGL Appr oxi mately 8? people were under BENTEL's supervision, 
including two deputies ^ | and | 

(U// PQU 6) BENTEL did not leant that HILLARY CLINTON was using a private email server 
while she was at DOS until it came out in the press last year. He had no knowledge of the server while he 
was at DOS. BENTEL met BRYAN PAGLIANO while he was at DOS and knew that he worked for 1RM 
but he did not know that he was also providing support to the CLINTON server. 

_ (U//FOHO) BEN TE L was shown a copy of an email sent from l ~ to BENTEL, 

| and l I on Marc h 17, 20 09, with the subject “Secretary 

Residential Installation Hotwash.” BENTEL provided that [was respon sible for setting u p secure 
communications in CLINTON's office and residence, and that | was a contractor in | 

section After reviewing the email and its attachment, BENTEL stated that he did not recall the email and 
that he might not have read the email originally because he and his two deputies functioned as “a 
collective.” BENTEL stated that the attachment appeared to be a summary of the communication 
equipment in CLINTON's residence at the start of her tenure. BENTEL did not know what the “Server: 
Basement Telephone Closet” listed in the attachment referred to. He then speculated that it might be a 
server for telephones. Upon further questioning, BENTEL provided that he did r.Ot <rt<bw, if DOS used or 
installed servers to support its telephone equipment. :: , 

(U//FOH©) BENTEL was shown an email sent from MONICA HANLEY tc- HUMA ABEDIN 
on August 30, 2011 with the subject “HRC blackberry” that referenced a discussion between HANLEY 
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and BENTEL. Upon reviewing the document BENTEL provided that he did not recall the email and that 
he would not have used the term “chapp server.” Furthermore, he did not recall CLINTON losing access 
to her email following Hurricane Irene or any related discussions. BENTEL explained that he did not 
have a lot of direct interaction w ith CLINTON'S staff and that communication issues would likely be 
handled bv l I from the “tech team.” 

(LJ//FOUO) BENTEL was aware of the Office of Inspector General (OIG) report from May of 
2016 in which it was reported that subordinates raised concerns about the Secretary's server to BENTEL 
in 2010 and he instructed them not to discuss the matter any further. BENTEL denied that anybody had 
raised such concerns to him. He further stated that the account provided by the OIG report was 
inconsistent with his open and welcoming management style. 

(U// FOUO ) BENTEL stated that he did not know CLINTON was using a personal email account 
for DOS business until after it was released in the papers. BENTEL clarified he knew that CLINTON had 
a personal email account but that he did not know that she was using it for work related matters. BENTEL 
did not know if CLINTON had a DOS issued email account. 

(U//FOUO) BENTEL was shown an email that he sent to MONICA HANLEY on August 30, 

2011 with the subject “Re: S berry.” The email discusses a DOS issued email account, 

SSHRC@state.gov, which had been previously established for CLINTON. In the email, BENTEL wrote 
that emails on the account would be subject to Freedom of Information Act (FOIA) searches. Upon 
reviewing the email, BENTEL stated that he did not recall the email exchange or the details surrounding 
the use of SSHRC@state.gov, noting that the account was likely set up by the system administrator. 
BENTEL included the caveat about FOIA to make sure that HANLEY was aware of FOIA and that any 
personal messages on the account would also be subjected to FOIA requests. BENTEL stated his group 
was not directly respo nsible for FOIA related m atters and that the appropriate contact for FOIA matters 
within S/ES-IRM was | | 

(U// FOUO ) BENTEL was aware of the State Messaging Archive Retrieval Toolset (SMART) and 
said it was not used by S/ES-IRM during CLINTON's tenure. BENTEL speculated that it was not rolled 
out to S/ES-IRM at that time because it was a new system and they wanted to work out any bugs before 
giving it to the executives. BENTEL stated that STEPHEN MULL would have made the final decision on 
rolling out SMART to S/ES-IRM. 

(U// FOUQ ) A copy of the original interview notes and referenced documents are attached in a 1A 
envelope. 
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(I JZ/FOUB) On December .21, 2015, C OLIN POWELL office address| 

office phone l Iwas interviewe d at his residence by 


Federal Bur eau of Investigation (FBI) Special Age nt fSAlI 


Also present during the interview was 


l 


land SA 


ho POWELL. 


After being advised of the identity of the interviewing agents and the nature of the interview, POWELL 
provided the following: 


b6 
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(U//FOUO) In his book, // Worked for Me: In Life and Leadership, POWELL wrote a chapter 
called Brainware outlining his efforts to modernize computer systems at the US Department of State, 
hereafter State. When he was sworn in as Secretary of State in 2001, one of the largest problems at State 
was outdated Information Technology (IT) systems. At the time. State and the Central Intelligence 
Agency (CIA) would swap responsibility every 12 months for the communication connections to overseas 
embassies. Sometime thereafter. Congress passed a law establishing a White House agency with the 
responsibility for secure diplomatic telecommunications. POWELL convinced the administration to give 
him time to assess the situation, so he launched a study to determine the agency best suited to maintain 
the communication connections. The study found CIA as the most competent, so POWELL fired State 
and reached an agreement with the then CIA Director GEORGE TENET where POWELL would select 
and evaluate the CIA staff person in charge of the system. Additionally, the system would be based on 
POWELL's requirements. 

(U/ /FOUO) In 2001, few State employees had a computer at their desks. Typically, there was one 
computer per office, so POWELL budgeted for the purchase of 44,000 computers and put one on every 
embassy desk. The project was done in-house without contractors. To convince and encourage others to 
use computers, POWELL frequently used his to set an example. When traveling to visit embassies, he 
would sit down at a random computer in each embassy and attempt to login to his account. This action 
allowed POWELL to gauge if the embassy staff was maintaining and using their computers. 

Additionally, he would frequently look up Country Notes pages on the State intranet to determine if the 
various bureaus of State were keeping their information up to date On his desk at State, POWELL had a 
State classified computer and a laptop with a 56kbps modem. The modem was used to access 
POWELL's personal American Online (AOL) account. He viewed his personal email much like a home 
telephone line in that it could be used for personal and business purposes. At times, POWELL would 
correspond with foreign leaders by email If the conversation became sensitive, whether with foreign 
leaders or other USG personnel, he would arrange for a secure call. 
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(U/ /FQUO ) The IT transformation revolutionized business at State. With a computer on every 
desktop, the time and space problems were eliminated when sharing information. Prior to the IT 
deployment, embassies communicated via cables. 


(U// FOUO) The State Inspector General (IG) and Intelligence Community Inspector General 
(ICIG) both wrote POWELL to ask him if he had any emails from his time as Secretary of State. 
However, POWELL took no emails with him when he left State and knew of no official record 
requirements at the time, however. State claimed they were capturing any data necessary. POWELL has 
not been able to get a straight answer from the federal archives regarding what record requirements were 
at the time. He is concerned the current environment will discourage open communication and the use of 
email, ultimately harming US Government efficiency. 


(U//F OU O) When POWELL traveled for State business, a team would put a computer in his hotel 
room for general use, but he would also have access to State systems. Some threat count ries would have 


additional security requirements such as 


If the need arose 


to have a classified conversation, POWELL would go to a secure facility, such as the local embassy, bi per dos 


(LJ/ /FQUQ ) In response to reviewing the email attached to this communication in a 1 A, 
POWELL provided the following: 


(U// FOU 9) During POWELL's first few weeks at State, he received several security briefings that 
restricted his ability to communicate. He was admonished that CIA and NSA did not want personal 
digital assistants (PDAs) inside of SCIFs, even if the PDA did not have wireless capabilities. He 
requested briefings to explain why PDAs were any more of a risk than the television remote controls in 
the SCIF, but was not convinced of the risks. As a result of these experiences, he advised HILLARY 
CLINTON, when she became Secretary of State, to resist restrictions that would inhibit her ability to 
communicate. 


S! 


